Privacy breach at Emigrant Direct?

I'm on the road and can't write in much detail, but I just noticed that I have been receiving spams since before December 8, addressed to an e-mail address that is ONLY used with Emigrant Direct Bank (http://emigrantdirect.com).

When I opened an account there, I created a separate e-mail address. They've never had any other, and there's no reason for me to have ever used this e-mail address elsewhere.

Barring the live capture of traffic (c'mon nobody really does that just to get e-mail addresses)... I can't think of any means that this address would have made it into spammers' hands .... other than an inside job or some kind of break in.

I hope it's not true. I'm open to hearing plausible explanations, or from anyone who has had the same experience.

I'm changing the address to see if it happens again.