Similar things happen with other third party. Got a funny looking "secure" message from a vendor via VirTru - WTF? Another is obligating me into a check service by Deluxe.

Sometimes your risk exposure is just the second party (Little League) but, with the explosion of SaaS it's like each of my vendors obligates me to get accounts at two more! Spreading my PII far and wide.