[icebraining]

Only if you're dumb enough to not delete any password emails.

You delete it from your MUA, but how can you be sure that it wasn't stored in any of the intermediate servers?

[lyndonh]

The natural assumption is that the hacker has got your password, not hacked gmail or hotmail, etc.