I guess if you've RMAed anything with Zotac you've been doxxed. The guy who first realized it found out when google searching his name . They've corrected the issue but I assume it's out there and it's never coming back. Even their partners aren't spared.
This one affects me. I RMAed an MSI 6700XT last year. I guess they got my name, address, phone number, email and some other stuff. All because MSI sold me a faulty GPU and I asked them to fix it