Well, they have your email address, and your password. And lots of people reuse passwords.
People still do that?
I do, but only because there's no way someone can brute force my password: "ju5t1nb13b3rf4n69"
Yep, that's a very strong password. No worries. You're 100% safe.