Im sceptical of this. My email was not published anywhere with regards to bitcoin or coinbase, I receive relatively little spam, yet I received 4 of these messages.
Their official response confirms this: http://blog.coinbase.com/post/81407694500/update-on-coinbase...