To my surprise, I have received spam to an email address which I exclusively used with a mining pool that seems to be generally considered trustworthy and reliable.
The spam is bitcoin related and contains this text:
GENERATE ON: 02/16/2015
(link text) hxxps://account.[censored].net/?invoice=ST-231550-[random looking characters]-passport.[censored].net
(actual link target) hxxp://russiancloud.esy.es/[censored].jar
Given that the email address I used to sign up to the pool is, with very high certaincy, globally unique and not easily generateable, it would appear the pool indeed leaked some user data.
However, googling for "[name of pool] leak" gave no related results at all.
How should I continue?