I've also had my password changed twice now.
1st instance - 12th November 05:12, KMM78653023V29896L0KM, email starting "Hello PHILIP"
I then proceeded to change my password and security question, but still impacted a second time.
2nd instance - 14th November 22:16, KMM78825547V64175L0KM, email starting "Hello ROGER"
This is a serious breach, accounts are being accessed without security question or password.