It could be that someone that once sent an EMail to Brad and that has him in their Address Book got compromised. They didn’t necessarily harvest it from the board, although I’m sure that even a visitor will see the link at the top of the board with his and Dr. Language’s addresses.
I’ve gotten some real beauts in the last few months. One purported to be from the FDIC (Federal Deposit Insurace Corporation) saying that the Department of Homeland Security had contacted them and cancelled the FDIC insurance on my bank account. Yeah, right! Forwarded that one to ftc.gov right away. I got another from DarkProfits.com claiming that they were charging my charge card for child porn on a monthly basis. Uh-huh, suuuuuuurrrrre. Sent that one off to the FTC also. These people are just fishing, or phishing as the saying goes, to get your financial information. Like I’m really gonna send my banking info to some jerk I’ve never heard of before. If you look carefully when you hold your mouse pointer over the return link, or do a View Source to look at the HTML code, you’ll see that the actual link does not match the one displayed to the user.
Lately I’ve been getting Spam in Spanish advertising concerts. I think I’ve gotten some in Portuguese from Brazil, and I had one in Polish a while back that I had a friend at work translate. They wanted me to play some lottery or something. I never expected fighting Spam to be a linguistic foray. 
Death is not a sufficient punishment for Spammers. They should be condemned to life in prison sitting in front of a terminal going through all the Spam E-Mail that’s ever been sent by all spammers, looking in vain for an E-Mail from the Governor with a reprieve.