USPS warns seemingly harmless packages could mean cybercriminals have personal info
From the article: "...Brushing is when third-party sellers send packages to people who did not order them. The items are usually not expensive, but once they are sent, that address can be confirmed as a verified purchaser... it can indicate that someone’s information has been leaked to nefarious people on the internet."
Article Reference: www.oregonlive.com