[stvswn]

So your hypothesis is that Google took the knowledge of the search query and attached some sort of indicator that the user was interested in AA onto the user's personal data (in violation of its own policies for interest-based advertising on sensitive topics). Then, it mapped that user to a cookie (in violation of its own policy towards cookie-user matching). Then it gave a list of cookies associated with alcohol rehab to a 3rd party (also not how any Google systems work, this would be in violation of many internal policies). Then, someone was able to match cookies to email addresses (available, unfortunately, in the shadier black markets of the marketing world, but totally in violation of Google remarketing standards such that the 3rd party would be likely barred, if caught, from all Google systems). Then, the spammer bought the email addresses and sent the emails.

Alternate theory: someone at AA sold an email list to a shady marketer.

[flashman]

You're misremembering the article. The spam emails were claimed to be because of a Google Maps search. The AA link was because an app on the phone (probably Facebook) was mining the address book.

[ForHackernews]

> (in violation of its own policies for interest-based advertising on sensitive topics).

Art galleries are not typically considered sensitive topics.