Yahoo account hacked

My Yahoo email account (which had what I considered a fairly strong password, with having both letters and numbers and being longer than eight characters) got hacked today by a spammer, who then scanned my contacts and started furiously sending links to NSFW merchandise and dodgy pharmaceutical sites. The account now has a new password and the contacts list has been completely cleared out. Fortunately, I avoided spamming our ALL-WORK email lists by the grace of God and LISTSERV-required confirmation before sending (said confirmation was not granted.) The embarassment factor was high, our security officer was calling, and I’ve now gotten the chance to re-connect with some old aquaintences whom I haven’t talked with in a while.