My Dad is with TalkTalk, and several weeks ago they sent him an e-mail offering F-Secure "SuperSafe Boost" for "a tiny £2 a month". He did not take up the offer.
Then, just over a week ago he received an (unsolicited) e-mail directly from firstname.lastname@example.org (confirmed by the headers and not just the "From:" address) , greeting him by name and offering what looks like a free 8-seat licence for "F-SECURE SAFE!".
So if TalkTalk have passed on his e-mail address and name to a third party, what else have they given away without permission?