We recommend that you do not have email address on your company’s website as hackers are looking for exposed emails address that they then harvest in or to send spam or steal identities
Instead we recommend using a contact form on your site that does not expose the actual address
Another piece of advice for avoiding spam. Always choose private registration when you buy a website domain name so that your actual info is screened. Spammers and trolls routinely harvest names from the Icann registry. Private registration is the norm is you buy a domain name using Google. GoDaddy makes you pay extra. If you don’t register your domain privately, your name, address, phone and email are available in the public domain for anyone to see.
You also need to ensure that you have a program like ThreatLocker that can lock down your system and prevent ransomware from running
If you would like a free network assessment you can schedule one here