Those are always terrible to have happen -- I explained it here, but usually it's a result of password reuse from another site. We do our best to detect those, but there's only so much we can do. With luck we'll be able to help them get their account back!