Ultimate phishing scam. Without some sort of trusted party or verification process lists like this are ripe for exploitation.