a lot of FTP and stars accounts have been hacked over the years. Seems to happen less often these days, almost certainly has something to do with increased paranoia/awareness of players and introduction of RSA tokens -
SecurID - Wikipedia, the free encyclopedia
rsa tokens cost a few points or a few ironman medals - nothing material if the money starts to matter. Would you prefer a 2gb USB flash drive or decent account security (same cost in FTP points)?
in the meantime - set your ftp sign up options to their most secure. Sign in using an e-mail address, not your screen name and add a three card pin to the mix.