Bad news! A financial institution has just CC'd me and about 100 other customers.

Good news! I now know how many people use [name-of-service]@[their-domain.tld] as a contact address!

Thoughts and prayers for the poor admin assistant who is going to have to do the GDPR walk of shame.

And sleepless nights for the IT team who didn't set up rules to prevent a mass CC.