You can't rule out that it wasn't publicly shown but you say that "evidence suggests" that they sold your address to spammers.

Do you have any evidence at all?