The idea that Paypal gave anyone's information out is ridiculous. When have you ever given that e-mail out before? Have you ever sold anything to anyone or made a payment to anyone you don't know? These are all ways someone could have received your e-mail address.

Also, if it's a common e-mail address, such as paypal@, they may have just guessed it.