Urk. Something of the same kind happened at Dreamhost... a month back? Two months? They didn't get as far as actual damage-- at least not in my corner of the farm-- but I remember the password-resetting part. File under: better safe than sorry.
I'm thinking it could be the internet equivalent of locking the door while the thief is still hiding in the attic?