I had someone mailbomb me a few months back. My Credit card was compromised and "I" bought a couple 99 cent items then bought over $700 of stuff from Crutchfield and sent it to Massachusetts. Did not figure which account was the problem so I cleaned out any I did not really need and changed passwords and log in info on the others. I now used random character password like names in place of email addresses everywhere. Never used the same password on accounts and all are complex and have 2 factor enabled if possible. So somewhere that had my info stored had to be compromised.

Unfortunately for the other "I" I use Outlook and have "Safe List only" set up in junk mail. So the mailbomb went to junk mail and the notes from the bank about the 99 cent and Crutchfield purchases were in my regular mail.

Unfortunately for me most of the mail bomb they used did not go away so I ended up changing the email address after a few weeks of huge amounts of junk mail. Since all mail that is not on the safe list goes to junk mail that meant any I had not yet added or were new also went to junk. So I had to wade through hundreds of messages a day before I emptied the folder.