This may be a dead thread, but I regularly did Word Mailmerge lists so ran across a Blocked account, & finally found out some of the ground rules (not Shaw's - they are imposed by the internet to reduce Spam):
1. Max. 160 emails per 24 hour period for each email address;
2. Max. 50 emails/hour (40 if already flagged suspicious) - unsure this still holds;
3. Bounce-backs must be < 20% of emails sent; unsure if this still hold; I've also heard of 5 in an hour;
4. Max of 128 CC's per single email - never tried that limit;
Now, none of these sound like what the OP encountered, who knows. But my best guess if they actually did keep changing both email passwords and overall Shaw account passwords, is that they were hacked by a keylogger or "man in the middle". Yes, it seems a little weird these days, so only a quick guess, or at least something the OPP should have checked out.