Guess what, I had the same situation with POLONIEX too, suddenly I got an email telling me a stranger IP address logged into my account. LUCKILY, I managed to change my password before anything happens, I did not put large amount of money in it either. So I guess I'm safe from the loss. But still, it isn't advisable to store the cryptos in an exchange.