I have the tendency to use different emails for different things I sign up for. For example, I signed up with the Postsecret newsletter with the email of postsecret@<domain>.org. This way if I ever start getting spam from them I can easily turn off that email.

Well, today I received a virus addressed to that email! My email was sold, leaked, stolen or otherwise somehow acquired by a spammer. The company that maintains the Postsecret list is iContact. So, if I were you, I would stay away from them!