if your server was cracked they could use your account name as offline name and then spam combination of passwords. Maybe they cracked your account if you had a password like "football" and etc. Try searching on google this: "youraccount:yourpassword" if results show up then you know they cracked it.