Received spam where they didn't BCC. Judging from the recipients, I'm guessing an infosec salesperson had their contacts (mail?) stolen.