I just logged in to check my account on the site... seems like it was hacked (yes I had changed my password after the last hack to something ridiculously complicated), and they changed the payout address of my BTC. 0.25BTC gone.

I checked the logs on my email - I did not receive an alert for an address change whatsoever, nor was my account accessed by any other computer but mine.

I changed the wallet back to one that I own.. of course I got an email confirmation / link for it.

It may be time pool operators start instituting 2 factor authentication.

Not running windows / flash / java / stolen software / don't reuse passwords, etc,  ... so no idea how it happened or what is going on.