I really don't think the email list got leaked. They are just sending this out to general addresses like admin@website.com and info@website.com.
Since I capture all emails sent to my site this got captured also.
Here's the latest update look at how clever these guys are...