I use a different email address for every service. About 15 years ago, I began getting spam at my diversalertnetwork email address. I emailed DAN to tell them they'd been breached. They responded with an email telling me how to change my password.
I guess I should feel lucky they didn't try to have me criminally prosecuted.
That could be a hack or something the company sold to a third party.
Same with me. I started to get spam from the email I used for a Portuguese airline. They didn't even respond.