Is it ethical or legal for companies to scrape GitHub stars for spam purposes?

Just got an email from jack.flynn@gatsbyjs.com with some spam and he mentioned that he got my information from the stargazers list of the Gatsby repo.

Is this something I should bother reporting to GitHub? I will likely never star another repo again because it's been proven to be a good source of spam.