This happens all the time. In a past company I worked at, I had test email accounts in the CRM, and those fake-contact email accounts would receive blast messages from reps who were now working at competing companies.

I always reported it, but damn, at least have the foresight to scrub your list of stolen accounts for contacts that have the last name "TEST". Pretty obvious where you got the list from if you don't.