The system looks clean
As to how this occurs then see this thread http://superuser.com/questions/725234/how-do-scammers-get-your-contacts-when-they-send-emails-that-appear-to-come-from
The last response is very pertinent