Yes, Blockstream must have been compromised. I have a dedicated email for the one time purchase I made on their website. Spammers are phishing for passwords. @Adam Back / @adam3us do you care to comment?