It looks like a third party service they gave their keys to has been compromised. I got several phishes that fully pass as legit Namecheap emails.