I reached how long brute attacks take and for my password it would only take 16 days. It is a possibility but its hard to say, could have been a phishing link as the admin suggested.

Also, Jimbou your payment will be one/two days late.