How did a company managed to get my email from my twitter account ?

Hi all,

I'm a bit puzzled. I just received an email from a BS company, containing:

"Hey, I see your a fan of X, blablabla, buy my scam".

Only issue is I only followed recently the X in question on twitter, and only twitter (no newsletter, no website, etc). I do not use my twitter handle as a pseudonym on any other platform, and I double-checked my settings on Twitter, no one is supposed to see my mail.

Any idea …

account email etc fan hey issue managed newsletter platform privacy pseudonym question scam twitter website