I have three Gmail accounts mostly unused. This morning I got an email on one of them asking me to verify my email address that was used to create an iTunes account. I went to iTunes and tried to login and of course couldn't and that email address was never used for an iTunes account. I reset the password and then logged in. I could see the woman's name, address and credit card that she used to create the account with and I'm sure if I wanted to, I could have made purchases. I changed the name and set the card to none and have no plans to use that iTunes account. I wonder how this person could have gotten the email address because it's rarely used and if if was simply a similar email that she mistyped by one letter this could be a huge problem for someone willing to advantage of someone's mistake. I wonder how often this happens.