Morning all! Just to reiterate, and as a few members have already said, there was no security breach and all your details are safe.
When you join the site, you are able to send other members a private message - which is what this spammer did. Nothing sinister - tech-wise, at least. The spammy messages should all be gone now, too. Feel free to email us if you still have any concerns.