Actually, email are very insecure, because any server that it goes through can read it just as easily as you. So, it could be that another server upstream has been hacked. Or, if the sysadmins on one of the servers, that your email goes through, is less than reputable he/she could be reading them too.