I wouldn't worry about it. For the longest time (like, 3-4 times a week for I don't know how many months) I was constantly getting password requests for my side, but nothing ever happened. I have no idea what they wanted so badly. It was an account name that I got after they cleared the database of some names, so I guess it could've been the previous owner, but what are the odds right? *shrug*
Nthing the good password maintenance, which should be practiced anyway. If you're really worried, I've heard good things about
KeePass (here's its
Wiki) which creates a database for all of your passwords, and can generate random ones too (it's good that it stores them for you, because there's no way in hell you're going to remember them. Example: I just generated "1&k^lnf%s,y?b9iRTq#Q" [disclaimer: DO NOT USE THIS PW]. I'd LOVE to see someone crack that.) So... yeah! Long ramble, hopefully it was useful to somebody.