[kaptitsky]

I got some funky e-mails from an old GMX.com account so I went to login.

In my spam folder, there were 92 backscatter mails, error messages returned from mail sent from my account.

Logging in GMX demanded I change my password because of suspicious activity on my account.

Their inference was that I had let my password out, but I know that that they had let their system be breached, either with access to user information or little resistance to brute force attacks.

Admins love to blame users for password breaches, but the odds that somehow, someone got into my computer or my head are small. Much, much more likely that their security was breached. Bank robbers target banks, not individual depositors; much more productive.

Anyway, if you have a GMX account, even an old one, you might want to login and change your password.

They have a problem.