[butz]

Adding email address without verification by its owner should be illegal.

If you are in EU, you might try invoking "Right to rectification" as described in GDPR. Although company might ask you for identification and you'll be back to square one. Look up CAN-SPAM if you are in US, as those messages can be considered as "Unwanted Commercial Electronic Mail". But again, no guarantees that company will comply.

Best solution is to add unwanted senders to block list.