I can only dream that it triggers meetings with security.

I once started receiving spam addressed to <mybankname>@<mydomain>.org and after several instances I reported it to MyBankName.

I explained that I only used that address in my dealings with them and so it must have leaked from them.

They said that's not how email works, you have one address that you use with all your contacts. One of them must have leaked it.

I tried to explain that I used a different host portion with each company I contacted.

They said that's not how email works, you have one address that you use with all your contacts. One of them must have leaked it.

I transferred my balance out and let the account lapse.