To cope with spam and their sources, I distribute a unique email ID with any company I communicate with. Since a few weeks, I noticed that I receive spam on the email address used for communication with Etihad. With spam I don't mean the usual newsletters, I mean the real annoying stuff like casinos and pills.
Since I have not saved the email address locally, the only explanation for this is that Etihad allegedly sold my address including other data like my name.

I filed a privacy data request through my business connect account, but haven't heard from them yet.