I get loads of spam, like most. A few slip through the filters.
I got one earlier today that was a tad odd - it looks like a genuine report of some sort of order, with someone else's details in it, but the link to "secure login to your paypal account" is clearly bogus. A link to crankbaits.biz that redirects to warezoff.ru and tries to get my details.
OK, spam, what the hell. I noted that it was to an email I only gave to microdirect, so maybe could have been guessed, but maybe a data leak.
Later today I get one saying that my credit card information has been changed and my address removed and QUOTES MY ACTUAL HOME ADDRESS to me in the email. Again a bogus link.
So, this means Micro Direct have leaked not only my email but my details. My address at least, and who knows what else? The latest spam just tries to get my "Verified by Visa" details, which makes me think they have my card details.
I should report to ICO, but they are proving to be such a bunch of muppets, I am unsure if it is worth it.