I just bought an entire TLD for signups/spam and made it a catchall. One positive is I know when companies are breached often before they announce it as my pagerduty@domain.com told me a little while ago.
http://www.theregister.co.uk/2015/07/31/incident_managers_pa...