Whenever a user changes his own password or resets his account (via email or secret question), this action is now publicly logged here for 30 days:
https://bitcointalk.org/seclog.php

Additionally, these same actions will be listed on the person's Trust page. A reset will be shown for 30 days, while a password change will be shown for 3 days.

This should make it easier to determine whether an account has been compromised.