I use unique, long random-character addresses, and the biggest company and sold my address was IBM. I've followed them up, but their excuse was that it was leak

I use unique, long random-character addresses, and the biggest company and sold my address was IBM. I've followed them up, but their excuse was that it was leaked from when they were hacked. I don't know who to believe.