Spam with Password

[makie]

I received a Spam E-Mail:

I am a professional hacker and have successfully hacked into your mail_account, your password was:*****
..... pay Bitcoin ......

Nothing unusual I receive such spam almost every day, but in this case the password was a correct one from me. The password was slightly scrambled, but it was clearly a old password that i only used here for this Simutrans-Forum.

The question was: How does the Spammer get this password?

[prissi]

Maybe once was a trojan a computer in the same Wlan that you used to connect ti simutrans.com? Happens a lot ... The passwords on the server are hashed, with https even on the client. However, in old times, the forum was http, so anyone in the middle could look at passwords.

Have I been pawned says one my emails has been pawned which is not possible for that email as it is a forward address and has no password for many years as I had closed that account. But the hoster had a data breach since then.