Email address targeting is the use of a mailing list, leaked address set, or harvested inbox data to deliver a campaign to many recipients at once. In security terms, it is a scale technique: attackers do not need a separate exploit for each victim if they can push one message path to a large audience. The target list may come from breaches, scraped websites, marketing platforms, or prior phishing collections.
It matters because volume increases the odds that someone will click, reply, or submit credentials. In phishing, a targeted address set can be used to send branded lures, fake alerts, or password-reset traps that look routine. Defenders reduce the risk by protecting customer-contact systems, limiting list exposure, monitoring abnormal send patterns, and training users to verify unexpected requests through a separate channel. Address targeting is often the delivery layer that turns social engineering into a workable attack.