Pretty well written email for scammers too. Touching on specifics. I’ve recently nudged some friends to use CC and this could dupe them. Any idea how they attained people’s emails? Maybe just targeting users from the coinbase hack to see if they have a CC?

Coinbase, blockstream, ledger, Trezor, etc... all lost customer data :/

Right, of course. Coinbase was most fresh in the mind but yeah, the risk of those other breaches has not gone away has it.