It happened. I just received the first spam e-mail to an address that's only listed in my Gopher hole. So it took it a little more than 10 years for the spammers to find it. I bet they didn't find the address through Gopher itself, but one of the various HTTP proxies out there ...