[treesknees]

You should watch your domains and look out for any friends who suddenly have a new car or a new nice watch :-).

My strategy for things is to use a unique username and email address (and password..) for critical services, that way any hacks/leaks of other sites don't reveal my entire web presence. It may be that your email was found in another dump, or from a domain whois lookup.