I think you may be right actually. When I read this

In this process, our EDDM vendor made a significant mistake by not excluding names, but instead including names before addresses, resulting in the distribution of personalized mailers.

from their statement, I made an assumption because I didn’t look at how EDDM works. The way I read “not excluding names, but instead including names” was: We sent a list of names to the vendor; the vendor was supposed to exclude those names, and mail to everyone else in the ZIP, but instead, they mailed to only those names. It seems that’s not an accurate understanding of the situation. I think the correct reading is: we said “no names” on our EDDM mailers but they acted as if we said “yes names” on our EDDM mailers.

From my original interpretation, that is essentially a customer list leak, or at least a ‘localized’ customer list leak, especially for anyone in a shared living environment where someone else may see the name printed on a Brave mailer and learn that that person is a Brave user.

Thanks for clearing it up though. Let me try to go back and edit a few previous comments where I’ve said this to clarify.