It may not be their first time - last year I've got spam that had in it information only ebay has access to. They claimed it didn't come from them, which if true means that they had a security...