I'm trying to decide if this is real

If this is real, then it seems like a stupid excuse for CollegeBoard to send me ads, or sell my data.

I think you're mis-reading it if that's the impression you got.

It's saying your college email address has been exposed already and they're letting you know that you need to be careful and also that your sensitive personal information wasn't affected. It seems like someone got hold of a large list of email addresses and sold them, since they took the time to make this.

I'm pretty sure Sarah's 100% correct. I got one of these emails as well and haven't touched anything College Board related in two years.

I just deleted it. Considering how easily personal information (read: emails) is passed along between companies these days, it's not exactly the biggest deal. Not saying the practice isn't an issue and shouldn't be dealt with, because it is, but this is essentially an email admitting to reality. At least, that's the gravitas it should be approached with.

http://www.securityweek.com/massive-brea...jor-brands

(I don't remember giving collegeboard my social security number...)