A few hours ago I was helping a family member pay for something on a government website with one of his credit cards, but for whatever reason it didn't go through, so we used another card and it worked fine. I also put in one of my email accounts for the receipt and payment confirmation, which I got in a minute after paying.
Two hours later I get a phishing email sent to my 'main' email account from a different provider (ie, not the one I put in previously) that pretended to be the credit card company of the card that didn't go through, saying that there was unusual activity in my account and they declined payments, click the link, etc. (I did accidentally open the link on my Blackberry 10 phone before checking the email address that sent it which was stupid of me)
Am I compromised in some way and how does this usually happen? I assume I should change my passwords.