There has *definitely* been a leak of email addresses.  Three years ago I created an account with a unique site-specific email address; I received one address-confirmation email at that time and nothing from the site since (I have not logged into the site or used it since that time).  A couple of days ago I started getting phishing emails sent to that address.