someone just correctly pointed out this is the third time someone has gained access to my so.com credentials. (third is undisclosed) :'(