Since its based on Russia the btc-e I had an account there, and left it without 2fa, then after sometime, I receive an email that somebody logged in my account there(I had open that website in windows environment at work) and soon after I opened from my Linux OS, changed password and added 2fa from Linux, no problem from that time. What I am trying to say , is your pc maybe infected, or you may have used same email and password all over a lot of sites and maybe you have got malware, run a scan of your internet security suite (not always helpful in this situation) , do not click any link in suspicious email, just ignore them, or select them and send them to spam folder. Be wary russian exchanges are the target of the hackers mostly because a lot of hackers are resident in Russia.
That may be it, but now that they have his email, there's nothing the OP can do about these phishing attacks unless there is a blocking addon for the email they are using.
