Brooks, my two phishing emails were addressed to my pierce-arrow.org *username*, not my password.
George –
Thanks! I said password when I meant to say user name. Still, how did they get my user name?
My only other clue about these emails is there is something in them that made my email sort them as spam.