Unfortunately the bad guys are impersonating good guys..
I have been doing an investigation on this topic and I'm very familiar with the 500 million passwords available. Heck I bet I have at least one of your passwords!
I could spend hours talking about this topic.. but I'll spare you the details and just tell you how to protect yourself:
Get a password manager and change all your passwords!
I use
https://keepass.info/ (but its geeky), but for one that is easy and effective is this:
https://1password.com/
This is serious stuff going on.. this hackers will turn your life upside down if you let them..
An no fish is too small.. you all have online banking, emails, etc..
Let me know if you have any questions and I'll be happy to answer you.