Bitmain are to blame - most probably they sold the info, and they aren't giving any statements regarding this while scammers rake their loot.
Horrible customer relations!