i'm really sorry to hear that this happened to you hun :(

The one thing is that no matter how good the password is if the site is not truly well designed with the proper safe guards and use of encryption in place then it is going to get hacked. For those that are really interested it is not too hard to track down e-mail or watch packets flying by on the good ol' internet (specially if you have particular site or location you want to target). So the best advice is that for stuff like that you may just not want it anywhere on the internet if others aren't supposed to see it. It's a sad truth about the e-society we live in.