More than likely, the website just has some really decent tracking software. It wouldn't be all that surprising for the National GOP to outfit campaign websites with quality snooping software. If a website can hijack e-mail accounts on a single click, it's not that difficult to fathom that it could acquire an e-mail address for advertising reasons. Since A.S. had the same issue, I would presume it was auto-generated. I'd bet they're both using the same browser, FWIW, and the site is exploiting a common vulnerability.
Date: Sat, 31 Dec 2011 11:07:51 -0500 Subject: Re: [Vo]:Someone leaked my email to Randy Hekman From: [email protected] To: [email protected] Daniel Rocha <[email protected]> wrote: Supporting someone that wants to help this monster alive instead of changing for better it is asking me too much. No one is asking you to do anything. Some overworked volunteer campaign staff person added your name to a mailing list. You should tell them to remove your name, or take a moment to add the message to your gmail auto-delete file. What you should not do is report them to Google for phishing, because that will get them into trouble. All of their outgoing mail will be censored. It is tough to get Google to undo a block once they put it in place. Stop making a mountain out of molehill. I disagree with Hekman's politics but it would be a shame for you to torpedo the first political campaign in history that features support for cold fusion. Let's see how far he can go with that as his signature issue. - Jed

