The Invasion

Today I received word that criminal hackers had been using my email account to reset my Facebook password and do malicious damage on that site. Unfortunately they also reset my Facebook security question so I may never get the account back. We'll see. I've contacted Facebook about that. I've changed my email password but I'm feeling exposed. How on earth did someone hack that password? Why do people do this?