To begin
A leak elsewhere, an open door here
A service with no connection to your work has its passwords stolen. Yours is in there, and it looks like the one for the mailbox of your structure. Nobody needed to target you: it was enough to try the same combination elsewhere. It is the most travelled way in, and it calls for no technical skill at all.