Well, I recently renewed my PCA membership on-line.  Less than a month later I start getting the classic "bigger, longer, thicker with a little pill" and other such SPAM in my email inbox.  Here's the kicker: I assign a unique email address to everybody, so there's only one place the address could have come from: PCA.  They either have lost control of their membership database or their machine(s) have been compromized (OK, yes, that amounts to the same thing 

).  So if you're a PCA member and have recently had an uptick in the incoming SPAM at your email account, you'll know where it probably came from.