Yeah, it could be obvious for most of you, but those who are like me, read:
Never use your "classic" password (that pw you use for most of your internet activity) on any mining pools. Recently I registered on numerous pools for many new coins and used the same password as I use for this bitcointalk account, for google acc, for paypal etc. It is very dumb and stupid, I know. Never do that. I think pools are the place where my password leaked.

Recently somebody from Tunisia (I live in Czech rep.) tried to log in into my facebook and google acc. Also he got access into my teamviewer with my mining rigs (same pw). He also stolen 4€ from my paypal (got back), and maybe he did more damage that I dont know yet.
At this point, no disaster happened to me, but it is highly uncomfortable.  I had to change all important passwords and I am frightened that I will lose my attention and he will hack me irreversibly.

So obvious but serious point: Make up unique password only for mining pools and stuff, use fake email and never let pool misuse your info. Dont be as stupid as me.

Thanks for reading and sry for my english