Public service announcement: If your business is buying "known good" email addresses from a data broker... you may want to ask how they are verifying their data.

When I start getting spam from well known entities (I'm looking at you Variety magazine) that I've never signed up for, and it starts coming shortly after a data breach notification... I've got a pretty good feeling that you've just supported that elements involved with said breach.