How do firms I've never dealt with get my e-mail address?

[Refugee]

We had it after switching internet providers.
The new company did an Equifax credit check and then Equifax got hacked.
It took two hours on the phone to sort out the fake transactions on the bank account.
The hack broke in the news a few weeks later.