The only other question at the moment is was the email address used the same as the one you are 'registered' under here or another? I suspect it is as CleeIB said in post #10 and one of your recipients has been hacked. I think if the server database has been 'hacked' we woud be flooded with these events.
If as above, little point in changing any passwords etc - just your 'friends'

. I suspect no-one will have
access to your email account.