Mine, too.  They do claim, at the top of their website, that “NOTICE: A bogus distribution list was sold to us; we appologize to the individuals who just received an email!”.  However, they should be smarter than using an unverified list (i.e., they should use double opt-in), so GBVault is permanently on my shit list, too.

Cheers,