Robert_Charlton - 7:29 am on Mar 28, 2013 (gmt 0)
From what I can tell, the hack attempt, if that's what's happening, is that someone set up an account using an email address that belongs to me, and put themselves on as an additional address... using for the additional address a name similar to mine. I think the scam is they had access via that additional address, and were hoping I wouldn't notice it but that I might add or correct other private or security related information.
After changing the password and noticing the additional email address, I did remove it... hoping I did so in time that they can't access the account with that address. I also removed what I could, and left the rest the same for now. I didn't add any new info, which would have been required if I'd made changes, say, in the postal address.
I should probably go in, check the account, and then change the password again, now that they're off the account (assuming that is the case). It appears that is so... but I'm sleeping on whether to change the password for now, since I assume if they change anything further, I'll get notified. I don't believe they can change the primary email address.
Actually, I really don't want an Apple ID. The setup as it is certainly is a drag.