l0b0 writes "In December I sent an email to a Spanish company to arrange a visit at an astronomic observatory, which was subsequently completed. Recently I have received a lot of Spanish spam messages. While this is probably not court-admissible evidence, I have a very strong suspicion that spammers have got access to their customer emails.
I have tried notifying them about the situation:
After sending an email to [redacted] in December, I have suddenly started receiving a *lot* of Spanish spam email. You might want to review who has access to your customers' email addresses.
This was completely misunderstood:
we sent you a email on the 14th of December and no one answer, The next visit began on April.
I have tried to clarify the situation in another reply, but unless and until they do something about it, anyone else who contacts them is probably at risk. What is the most effective way to warn others that they should not contact this company directly, and to revert this statement once the company has got its act together?"