I used to mine, but don't anymore.  I believe I read something recently about a firmware update, and that people were complaining about how insecure the update itself was.  My guess is that he's probably not hacking your password, but exploiting a security weakness.  Anyhow...sorry I can't be more helpful, but hopefully this gives you something to look into.