It's not just companies selling your email address to third parties, it's also companies that keep your email on file and then get compromised.

Most of the spam/phishing I get is from companies that stored my personal details and then got hacked.

I would say it's likely you just got lucky.