Or your email address is in another mailing list that was sold by another company.

That or you're still using the same email address that was disclosed in the 2012 data breach that LinkedIn suffered... which is easily obtainable.