Wilki: I wouldn't call it "stupidity", as being the victim of a hacker makes you nothing more than a victim. That's like blaming someone who has had their purse snatched for letting it hang loosely from their shoulder.

That said, in the cases that I've investigated, the actual "hacking" took place on the email account associated with the UO Account. While we are looking into changing how our account site helps people recover lost passwords, the bottom line is that a hacker needs to access that email account in order to gain access to someone's UO account. Without access to the email account, they cannot obtain the password.

If you have a strong password on your email account, keep your system free of trojans, don't post your information in public or give it to people voluntarily, a hacker is going to have one heck of a time getting your UO password.