Yes, it is a Gmail address, from the beginning of Gmail itself. I beleive it was exposed countless times since. This thread made me think about changing that and get a new address on a personal domain.