Yesterday I, and 500 other people, received the following email from Nucleus.vision (the domainname matches):

https://i.imgur.com/tvpC0Z3.png

The issue is that the Bounty Manager put all email addresses in the CC field instead of BCC. This exposes the email address of 500 people.
Guess what I received today? The first targeted phising attempt:

https://i.imgur.com/zbyLIoE.png

Worst of all, nobody from Nucleus Vision replies. They ignore my messages and delete my chats, as if it never happened. Shame on you Nucleus Vision.