Hmm. That e-mail address goes into three systems we don't control:. 1. Volusion, 2. mailchimp for our monthly newsletters 3. our shipping system. There is also a possibility that this might have been compromised by a system on your end. If you want us to look further into this, maybe you can send an e-mail to firstname.lastname@example.org with the details and we'll dig deeper. Thanks for bringing this to our attention.