No, they logged in on users account using the correct login and password. We have logs showing the loggin succeed on first try.
Oh, that's good news. Thanks for keeping your site secure and staying on top of everything.
You are not alone, I`m with you too...

The same case - correct login/password...
No exchange responsibility - no 13.4BTC
Such a nice mtgox.com exchange

PS
MagicalTuxWell Mark,
I`d like to know from which IP was made 13.4BTC transaction to fraudster wallet...
Is this a open information for me?