somehow they got the email address to send the email that the mailbox is full. Then there was a link to click to delete messages. I didn't click the link, but how did they get the email addresses?