I've had a few providers spam their entire contact list with CC instead of BCC.
It was amusing - both in how large the list was and how many of you use your work email, full names in email...
Hint: go here
http://www.pipl.com/
Put in your "hobby" handle and email
See if anything comes up cross-referenced.
And it's not just the clueless that this can hit. I gave a provider a bit too much info recently when signing up for a googlegroup they run, because Google helpfully crossreferenced it with another account that had my full name, place of business... fun stuff.
Google, Facebook, Yahoo, etc... all of these services will give out as much info as they can, whether you set them to or not. Be careful out there.