[Errant]

Had an old yahoo account taken over by spammers once, along with a bunch of others who had old accounts that Yahoo kept the files of on an easily broken into server.

Someone may have gotten your info from another less secure site and just seeing if you had a gmail account using the same username/password?

[steve86]

That’s the puzzling thing — did not use the same password on any but what should be the most secure sites (like banks — that’s what scared me). Have different passwords now.