I don't think how hackers get any info just in that way. I think they can get our email because can see it on bounty spreadsheet.
Then stop giving your email and other personal details out to an anonymous bounty manager in return for the future promise (maybe, if they actually pay you) of a token (maybe, if it even exists) which probably won't even be listed on an exchange and will almost certainly be worthless.
If you are absolutely dead set on making your friends and family hate you by spamming your nonsense all over social media, at least use an email dedicated for bounty campaigns and nothing else.