I'm able to log in, and it appears as though my .65btc was not stolen (WOW!)

I cannot, however, change my payout address. It's disconcerting that it must remain locked on the bad guys' address.

very impressed you guys are going to refund everyone. hats off.