UPDATE: Phishing campaign targeting Blockstream Store users:

"Our investigation indicates that customer data may have been exposed by either a breach or a leak from a third-party shipping provider. This leak included emails, but we can’t rule out that telephone numbers and shipping addresses may  also have been taken at the same time."

https://www.nobsbitcoin.com/blockstream-is-investigating-a-potential-email-database-leak/ 

 What’s more worrying is that they don’t know what was actually leaked 😞