Wow that's even worse! I use a catch all email and I recently even contacted a company I bought something from about potentially being compromised because I got a weird email. This here would explain what happened.