That’s scary, but don’t panic - these stolen passwords come from data breaches, where your data was lost by someone else. But the bad news is that this sort of cybercrime is nevertheless confronting and scary, because of how the crooks claim to have spied on you. They include personal details in the email that allegedly "prove" that there must be some sort of active spyware infection on your computer. The data wasn’t lifted directly from your computer. Same again - the crooks use phone numbers, paired up with email addresses, acquired through a data breach.