Resurrecting this thread so others will learn from this. Our account was hacked this week and much of the same was similar to the stories here:
1. They never changed the password on the account, BUT...I was distracted by the fact that they subscribed my to hundreds of newsletters from all over...