How did they get my email address?
I have been working in Information Technology for almost twenty years and I've seen it all. The two biggest problems that cause people to get listed on spoofing databases (lists of email addresses for spoofing) are:
1. People click a link in a phishing email and freely submit their email address (unbeknownst) to the list.