I've just received a phishing email to an address that is ONLY used on the forum.
I use a different alias for each company/forum etc so can be sure that the alias idnet@domain is only used here
We are not aware of any security issues.
Thanks Simon, I'll keep an eye out for any further emails
I can find no evidence to suggest the forum has been compromised. We are running a secure version of PHP plus the latest version of SMF which has no reported security issues.
The most likely explanation is someone has carpet-bombed the domain hoping to hit a few actual addresses. I know this has happened here many times before i.e. (random)@idnet.com
You could check the email address @ https://haveibeenpwned.com/ although I doubt anything will show up.