I'm not going to comment on the legal allegations made by the vendor as you have not shared any specifics. It's possible, for example, that they got "Joe jobbed" by somebody using the address on your email server, and they believe that you were responsible.

As for laws or regulations that might forbid the use of a company name in an email address created specifically and exclusively for the purpose of dealing with that company, I doubt that you'll find any.