Super Admin getting spammed

This has happened a couple of times now, I woke up today and my primary super admin account was spammed so I couldn’t log in. Had to fix in the users table in the db.

I have it set to spam users of the spammed blogs, but this says it never spams a super admin… so must be something else going on here. Is there any way of debugging this after the event?