Hello @KittredgeC ,
All sign up forms made in our system have built-in reCAPTCHA. It's possible this is a more coordinated attack from someone manually signing up the contacts. To be honest, if you're being targeted by something like this, you have two options:
Remove the sign up form that's being targeted from wherever you have it posted (an inline on your site, a Wordpress form if applicable, a landing page linked on your social pages, etc.)
Set your account up for Confirm Opt-In (requires turning on advanced permissions for your account), so any sign-ups have to explicitly click the link in the email they receive and navigate to the confirmation page, before they'll be active, billable, send-able contacts.
Since you've already setup your account for reCAPTCHA, there's nothing further to do beyond removing the sign-up capabilities from your site entirely, if you don't want the fake contacts coming in but remaining in Awaiting Confirmation status.
... View more