As I mentioned already in the weekend summary thread, I got hit this last weekend by this crap.
I wasn't thrilled with their response to my case, so I'm gonna smirk just a tiny smidge. I had only gotten the mobile authenticator for the pet anyway. Had never had to change my password until this. (8 yrs? sheesh)
Dunno if I'm gonna get over being paranoid about getting hit again though.