The article says it has already notified the people that have had their accounts hacked, using a verified two step reset on the password....
How do you know the hackers aren't the 'people' sending the reset password email?
Scott (bad people will do bad things until shot) B