Do you have a Facebook account? These scams usually come from there. Facebook completely disregards all privacy issues, and has acknowledged that repeatedly. If Facebook has your email address, you can expect this to happen repeatedly, even if you change your Facebook and email passwords.