Yup, like I said, I didn't get the banner until hours later.

I'm pretty sure they brute forced their way into gmail's POP3 interface. Which for some reason doesn't have as much security on it as the web interface.