Hi
I've had exactly the same thing from some big companies, including an airline.
In all cases the email address given to them was unique, never used elsewhere.
Nobody though gives a monkeys!
One leak was from a well now computer bits online retailer. I received a phising Email, the usual thing, from a UK bank, and they also had my first name! My first name could not have been guessed from the email address. A complaint to the company and their data protection officer went unanswered.
Another company covered their tracks, after getting them to take the complaint seriously, they told me it couldn't have come from their systems as there was no record of the email address in question in any of their databases, despite the fact I had signed in after receiving the SPAM to check what personal details they had about me, which used the email address. On trying again my account didn't exist!
There have been plenty other leaks.
I've complained several times to the Information Commissioners Office, explaining how I know the email addresses must have been leaked from said company, and months later you get a standard response about it being a virus's on your computer doing it and that I had no evidence that it was a fault of the company, so no investigation takes place. So gave up trying to complain.
I've had email addresses that haven't received emails for 4 years or more from companies that have long ago shut up trading suddenly start receiving SPAM, so I can only assume in those cases the data has been found on second hand servers!
Regards
Phil
Edited by deleted (Sat 30-Oct-10 16:15:29)