Yup, I'm also being hosed with PlusNet spam
Again, a unique addy. They have obviously been breached. I've had 2 successful dictionary attacks on my domain in 5 years. My guess = marketing partner breached (this is very very common - use a shonky agency for a mailing and watch your data get sold) or an employee and a USB.
FESS UP guys.