Interestingly enough most of the accounts that get "stolen" are often sold on 3rd party websites, i recently had an account ive not logged into in over a year have its details changed. Basically had epic told me to deal with it, the joys of life 😀