I’ve just double checked, and actually it’s an old email address that I used until the 2015 data leak. I reckon it’s related to that, and not a recent one.
“Plex: In July 2015, the discussion forum for Plex media centre was hacked and over 327k accounts exposed. The IP.Board forum included IP addresses and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked.”
Compromised data: Email addresses, IP addresses, Passwords, Usernames
As soon as this happened, I changed email address, username and password.
The Amazon spam was sent to the old, now unused, email address.
