> If I ever receive spam addressed to foobar.com@mydomain.com that is unrelated to your service I know you leaked or abused my data. Result: you will get a DSGVO complaint and I filter all emails addressed to this address from my inbox.

Has this ever resulted in significant penalties for those companies? I used to do this but I gave up as it never seemed to achieve anything.