You've not been compromised in any way, the chances are a site you have used at some point has been, and the bad guys have accessed that email/password data and are using it in quite a creative way.
Pop your email address in here: https://haveibeenpwned.com/ to see the site(s) likely responsible.