I run the email marketing systems for a publicly traded company. This is my area of expertise. Contrary to popular belief and pervasive reporting, there is lit

I run the email marketing systems for a publicly traded company. This is my area of expertise. Contrary to popular belief and pervasive reporting, there is little-to-no second hand market for email addresses. Frankly, random email addresses are not particularly valuable. (Targeted lists of individuals, on the other hand, are very valuable and a different story.) I can almost guarantee you one of two things happened: - This company is a "legitimate partner" of Uber and has signed a data sharing agreement to handle some amount of market research/etc. Epiphany RBC is based in the Netherlands, so if this email is legitimately from them, they are required to have a chain of custody on your email address as part of GDPR. You can reach out to them directly and see where they got it. - Your email address was randomly guessed by a spam bot that is looking for particular keywords. The vast majority of spam is sent this way - again, email addresses are not particularly valuable and a random address generator will eventually find it.