So it's always best to use an email provider that allows you to create dozens of aliases that you can freeze, isolate or stop them when such attacks occur (it should be assumed that such data is always leaked).