Reminder people - they are getting in by hacking your email account.
Once you're in someone's email account you can have password resets sent for anything. They're probably in your facebook now...
Secure your email address by changing your security questions first, and your password.
Then change EVERY other password you have. And don't be silly enough to use the same one for everything again, as then once they breach one they breach them all. At the same time, even if you have different passwords for everything, once one is breached you can't trust any.
Stay safe kiddies.