I’ve just received found a phishing mail in my spam folder.
I use dedicated email addresses for every single service and website I sign up to. So I never reuse a username or password. This allows me to identify where someone has gotten hold of my personal data.
In this case said phishing mail was send to the dedicated “Plex.tv” email account hosted on my own domain. Since this address is only used to login to the Plex website and not publicly visible anywhere, I must assume that some has gotten hold of your account data.