Logged in. Balance is correct, https is working, and it doesn't accept incorrect passwords. It is very unlikely this is a hack.