Thanks for the Post Erik @flaxz - It is an important topic and one I will also be reinforcing at my Russell's Chatter

I am still perplexed
I followed this link in my Notifications at Facebook

This took me to a facebook page where I made a comment about how unscrupolous the link in the post looked.
That was it,
No enetering of keys, no saving of keys in my browser no keeping keys on Computer etc.

I use Keychain as my main tool.

All i can think is that they have a whole bunch of keys and they are confirming you are the owner with the facebook post ??

Anyway, lesson well learnt

I have changed all my keys, all my master passwords and my keychain password and will be monitoring very very closely.

I will be regularly changing my password and keys :)

Thanks to you and the community to alerting me to this, as I was sound asleep blissfully unawares