Oh ffs.
If you are a Humble Bundle member, immediately unlink all your accounts and remove your payment info.
They've launched a new vibe-coded website, and as you'd expect with anything vibe-coded it's shit, and they forgot about the security basics, so now accounts can have emails changed without verification etc.
This is a class action lawsuit in the making...
https://kotaku.com/humble-bundle-vibe-coded-ai-redesign-account-security-password-email-2000756085