I recently joined a new organization. our usernames are our email with added letters at the end. Within days of publishing my first public featureservice I got started getting spam. I get that this is my organizations problem because of how we set up our users. I have a real problem when an Esri partner is doing this. Mind you I cannot PROVE definitively this is how they got my email address, but there is no where else they could have gotten it. I have attended no conferences or webinars using my email. Does Esri do anything about partners behaving this way?