Even if it were real it dosen't count as hacking...  and I can't see you being at much risk considering all you need is a user name or e-mail to initiate a password recovery.