i don't use a hosted alby hub, but i do use a self hosted alby hub for connecting via NWC to various nostr apps. i also shut this service down about 15 minutes ago because we don't know what's going on and im not taking any chances right now.

According to Alby the attacker was taking lightning addresses and requesting password resets. This basically dox profiles giving out the email. So the email from Alvby is legitimate. But the attacker now has email addresses associated with Alvby accounts associated with lightning addresses. Public posted to people's nostr accounts etc. More than likely recommended to reset your email, since you probably should have been using an alias if you weren't. They said that Alby Hub and every other service is unaffected and there are no further security issues...