Don’t think it is that easy to hack into an email account either, unless a common password is used.
Guessing that people loose their accounts because they let someone trusted onto their computer for a few minutes that they should not have trusted, or they have downloaded some cutesy program that was really designed to send back passwords, or they tried out the hacking sites in the google search that ask for your email and password (suckers are born every day).
Something that know one has mentioned though, is that SP’s are loosing access to their accounts, and some are the same SPs that require detailed client information be sent by email.