Comment by pavlov

Yes, that seems to be the likely explanation at least for the second linked email which closes with:

”Please see attached screen dump for a screen shot of your contact info included in Spotify (or what more likely seems to be a hacked Spotify developed illegally by a third party).”