I had just signed up to a new site and used the same password as my google account. A few minutes later I started getting emails sent from myself with attachments from my google drive account.
I immediately changed my password, but I'm really worried now what this hackers intention really is...