That's basically what it comes down to. We had over 150 accounts on our pools hacked as well. Those who were smart enough to use separate passwords just had their accounts locked.
You can't force people to use different pins and passwords unfortunately, you can only educate them and let them make their own decisions.
Also judging by the number of people who use gmail accounts as well, I'm assuming that the problem goes farther than just hacking on a pool. People will have their egmail accounts hacked as well and possible banking information stolen, paypal funds stolen, and the list goes on.
I can't stress enough how important password security is. And how important it is not to just run and sign up to the latest 0% pool out there. Think about it.
http://dedicatedpool.comRyan, dedicatedpool.com support/admin
admin@dedicatedpool.com / IRC on freenode #dedicatedpool
http://dedicatedpool.com/images/l.png