[support] Security Issue

I had an email from one of the sites where I'm user1 today... Your user data for accessing The Best Plans<br /> Username: Yani<br /> New password: uzcnsf3z<br /> Obviously not from Drupal. And no I won't be changing my password. I'm also noticing a failure in an ability to update modules. Anyone know if there is some hack running about that would explain these things and perhaps link them to a common security error? Yani