Leaked Mailgun API key — same phishing risk as SendGrid

Mailgun API keys let attackers send email from your domain with valid SPF/DKIM/DMARC. Rotate immediately; same attacker playbook as SendGrid.