Well, they sent me a message about a month back saying there was "suspicious activity" in that account, but because it's not (wasn't) my main e-mail account, and because I was behind on e-mail, I sort of... overlooked it. So it's possible that had I just logged in and changed the damn password, the whole mess could have been avoided. If it had happened to my main e-mail address... that *is* a scary thought. erk.