My public wallet has, the frozen wallet hasn't so I think it's a service I use selling active addresses to these people....
Question is which one....I've used almost everything lol (most recently being Dell)
They are getting addresses from recent transactions on the blockchain, any node has that data.