I am going after retailers who use junk INSERT scripts into their customer database, so that email addresses differing by a nonalphanumeric character get junk marketing materials from a retailer they never ordered from.
I shouldn't receive someone else's Billing Order. I've emailed the Loss Prevention Dept of Overstock, and told them I'm printing and mailing a copy of my receipt to the billing address if they don't correct or delete.