That was my first thought. I used to have a Yahoo email and I'm assuming at this point (multiple hacks), it's out in the wild.