A.

They called me using stolen contact information.

I don't know how it ended up in their database, and I don't say they were immediately responsible - it could have been a marketing partner - but they had a single-use email of mine that had gotten leaked on the dark web in a well publicized hack. There can be no other source for this information except the hack.

As a rule, if a company contacts you using stolen data, just hang up!