This is one of those things one can go back and forth on forever I guess. He did say though
Firstly the email address receiving the spam is highly unlikely to be “guessable” by spam bots or dictionary attacks. It has multiple strings separated by a delimiter and such and is with a major major email provider (think hotmail, gmail, yahoo).
He also created it only a week ago ( did not post it anywhere in the wild I guess?!) and then he gets spammed. Sounds like an unlikely victim of an email crawler. I think there is more to it then just an unruly media agency.