The way hackers are getting to get account information is by getting unsuspecting users to email it to them without their own knowledge. A website is setup to hack an account by simply asking for a username and password to join said account. When one setups outside accounts use different passwords other than those used for email or MSN. This is a good practice to separate at least the email and
. signup names. A good reference is http://en.kioskea.net/faq/sujet-154-how-to-hack-an-msn-account.