In my Sent folder, there are many spam messages sent out.  But I didn't create them nor send them.

It's unlikely that somebody signed into my account to do this because it would be extremely time-consuming to send these many spam messages manually.

Could somebody have hacked into Zoho's system and used my address to automatically send out spam?  If so, how do we stop this?