I would agree but disagree for the following reason...
If said intruders did change email addresses on compromised, then why is my email address recognized when requesting account credentials? Unknown email addresses used through the recovery are noted as unrecognized in the recovery response.
Hopefully it all gets worked out without too much trouble.
|