spam lists from processors?
 

I am continously getting messages from members of my site telling me that they get spam sent to addresses they have only given to my processor. (who shall remain nameless so long as I believe they are trying to do something about it.)

Does anybody have any solid facts of leaks in the databases of the big processors?