Eventually they will. There are some dumb people out there and it's just a matter of time before this email finds the right person. I just wish they paid good money for that database and will never make it back. The only thing somebody who knows your email address can do is try to hack that mailbox and pray that they can find emails from an exchange like login notifications in there.

Word of advice: always keep your mailbox clean and delete all confirmation links after use because they may contain your client number and other details. You never know when someone will try to bruteforce your password.