I hope this is not true, but it looks like you have pretty good evidence. I've been a happy emusic subscriber for years. I don't mind spam so much only because Gmail's filters are pretty good. But, I do get quite a bit of it. > 1000 in my spambox right now. And it's totally uncool if emusic is responsible for any of it. Upvoting in hopes this catches the attention of emusic. I might even submit a support request with the link. I'd love to hear their side.
UPDATE: I submitted a support ticket with a link here.
Imagine my domain name is OddName.com. The email address we gave them is something like emusic_XX@OddName.com where
XX is the checksum of "emusic", and that is the address to which spam is being sent.
I think the evidence is overwhelming.
I'd also love to hear their side of it, but given that they didn't bother to reply to my email I suspect they either don't care, or don't accept my evidence.
I don't expect you'll hear anything. I don't think eMusic cares, and I would be interested in hearing any ideas on making this more of a story. If companies don't get bitten when they leak email addresses to spammers then the problem will simply get worse.
UPDATE: I submitted a support ticket with a link here.