I can confirm this, it happened to me too a few days ago. Password-request was made by attacker, he managed to grab the reset-link WITHOUT compromising my email-server.

Thankfully I noticed it within a hour after it happened, since I get my emails to my phone almost instantly. So I saw it the instant I woke up and peaked on my phone-screen. I quickly jumped up from bed and sent a email to MtGox, and MtGox staff was able to lock-down withdrawals fast enough. I did not lose any money.

But still, I definitely got hacked. And the hacker managed to change PW without touching my email server.

Close call this time, no doubt.