Edd, you dont have to have done anything for your account details to have been breached, a lot of it happens internally, especially in the foreign call centres.
if you need any security advice let me know, its a huge part of my job so i can keep you on the right track computer-wise
Andy