Time to rotate that password, Delightful. One tactic I have is use a different email+password pair for every site. These hoodlums are sending out thousands, or perhaps missions of these so really, its not personal. They wait for any impulsive enough to respond and then their fun—and our grim—begins.

For keeping track I use Password Wallet, but there are many other password management apps out there.