I'm using an individual email-address for all websites, which require some kind of registration. So I can see immediately and beyond question who's (ab)used my email addresses. Today, the email I use for dafont EXCLUSIVELY received a phishing email (horribly stupid done Amazon fake mail).

Now, I'm worried about dafont's security regarding our personal data. Did dafont get hacked? Or - which would be worse in my eyes - is dafont selling our email addresses?

Hi,
Dafont has been hacked in may 2017.
You probably received an email about that, as you can see here : https://www.dafont.com/forum/read/324268/scammer-email

(Dafont's not selling anything)