So, what do you do to protect yourself against this? I recently heard about incogni, who you pay £60 per year and they send regular requests to remove your personal data from brokers. This sounds pretty good to me, and I saw a positive review on YouTube for it.
I've checked my email on 'haveibeenpwned', and the answer is a resounding 'yes you have lots'. I'm not really sure how to proceed with that, I am planning to set up a new email address outside of outlook and Gmail soon, maybe with proton.