It happens a lot I'm afraid to say, I've seen many people adamant they haven't been compromised only to discover they have been phished. Just make sure you give your computer a bloody good going over and use a unique and complex pass phrase and PIN for your SR account you do not use anywhere else. Thread locked as resolved.