Could be client-side or man-in-the-middle issues. I do not see a sign of password hack in the exchange between Q and CM.
Sorry I read it wrong.. my bad. my multitasking abilities kinda suck today.