Yup. When I set up an account with Ameritrade, I initially created an email address firstname.lastname@example.org. Then I started getting spam on it. But the spammers might have guessed that email address. So I created a new non-guessable email address email@example.com. But then I started getting spam on that. So I notified Ameritrade. No response, so I closed my account. A few months later, there was a news item that a trojan running on the Ameritrade servers had compromised 6.3 million email addresses.