Originally Posted by Kirion

Sometimes its not really person fault. For example, there was a nubmer of account hacks in russian wow community (our guild bank was stolen same way) when hacker use xss attacks to retrieve password from forums or email and then use it to stole wow account. So its better to not use same password and same e-mail address on your wow account and account on other web recources.