You know, I only use my gmail address at a few places so it’s pretty obvious some “legitimate” business are either selling their email addresses, doing the spamming themselves, or they’ve got a MAJOR security hole.
Just goes to show, you should always have 2 email addresses. One that you give out to companies and one that you use for friends and family.