I'm concerned about recent spam to Simplelogin aliases

Occam’s razor. Considering that the lawsuit email appeared legitimate to you, it would seem most likely Amazon shared the email on record to facilitate the legal process. I would go a step further and say the commonality between all these events is not SimpleLogin.