[RKDinOKC]

It's most likely spoofed phishing. They didn't necessarily get your email or access to your address book. Recipients and senders are sent unsecured between servers to establish the connection to send emails. This handshaking can be sniffed. Have received spoofed phishing emails from people I know that I never sent or received an email from, but were my friends on facebook.

Usually your ISP or email provider is going to contact you if you have been hacked. The hacker will be injecting emails on the email server from your account and send them enmass alerting the IPS and or email provider by sending more emails per hour than allowed and will be reported by most anti-spam services. If that happens you should be asked to immediately change your password, AND update to the newest version of your email clinet. Mostly old versions get password hacked.

If someone sends a link in an email ALWAYS make sure the actual link is where the text says it is. Same with web sites. The typical phishing attempt is to tell you that you need to update some sort of account information hoping you will have an account with that service and click on the link go to there site that looks exactly like what you expect and enter your information for them.

And DO NOT one any attachments you aren't absolutely sure you asked for.

Think before you Click.