I hope someone used a unique email address (ex. name+uniquestring@gmail.com) for registration on that website where the scammer got all those emails, so we can know where his email database is from. Perhaps it was a hacked site, but it surely was a targeted attack on emails of bitcoin users.
Most likely still emails leaked from the mt.gox hack. At least I got it to the email I haven't used for anything else.