Account hacking is a very common thing online today. It's why I find the use of Two Factor Authentication very necessary because it's capable of preventing anyone else from accessing the account apart from the real owner. I always have this enabled for my members account once they register. It's there decision to turn it off or leave it on.