I'm not surprised in the least, nor should anyone else be. Doesn't make it ethical or right, but just don't be surprised. This is exactly why you educate yo'saelf on personal electronic security. Look into using PGP or GPG for email, use only chat programs and clients that support encryption, be DAMN careful of what sites you browse and be wary of sites that don't encrypt when you login (like the Org.....), don't write down all your passwords on post-it notes that you plaster all over your monitor, etc etc. In this day and age of identity theft it really is Not A Good Idea© to not at least try to learn the basics on ways to protect oneself, at home and at work, because it's not that terribly complicated.

Now go fetch cranky ol' Uncle Whacker his 'cough medicine'. /off soapbox