I'm honestly shocked this has been going on. Very disrespectfull and just plain wrong.
I'm glad it was found out though, in before more damage would have been done!
Instantly changed my password as well. Maybe, I don't remember it seeing pass by but its possible, a way to 'prevent' it in the slightest from happening is to have an e-mail go out to the e-mail adress when an unauthorized IP address has accessed your account and you need to give permission? I don't know, just popping an idea here ^^ (again not sure if anyone suggested it already!)
art by Shadowfeathers of Thunderjaws OC Steve, edited by MossDragon for Thunderjaw's use only