If you go get your own domain (yourname.com for example), most providers set you up with e-mail service. You can create whatever@yourname.com, and with most, it's pretty much unlimited.
I have a couple of domains, and I setup a specific e-mail address for each provider I deal with. If any e-mail messages are sent to that address from anyone else, I know that provider sold or traded my information, and they won't be a provider much longer. I also have some throwaway addresses setup for offers, etc.
I noted that someone mentioned that their credit card has been hit several times. It's not always that your specific information was stolen - there are also efforts to "guess" card numbers. This happens a lot, and can be either sequential guessing (they try xxxx-xxxx-xxxx-xxx1 and work their way up) or if they identify the schema used by the card issuer, they can guarantee they have potentially valid numbers. This has happened to Chase, for example. Their schema was discovered, and the bad guys knew what valid Chase numbers would be. It was just a matter of hitting active ones.
