I had something like this happen with a VoIP provider (I don't quite know how to describe them, but they're like Twilio where you can 'code the phone' sort of t

I had something like this happen with a VoIP provider (I don't quite know how to describe them, but they're like Twilio where you can 'code the phone' sort of thing) and my unique email address. Reported it to them out of concerns their system was breached, explained the unique email address situation and was given nothing but denial in return and ultimately got nowhere. Sucks, but I guess it is what it is :/. This was a while ago so it's fuzzy but I just ended up not using them anymore/not going forward with them.