At 6:30am this morning, I apparently reset my minecraft.net account password. Except I was asleep. The password used was complex, unique to the site, and not dictionary-attackable. It was only 8 characters, but @Mojang should see online brute force attacks, surely.

I found out via an email from @MojangSupport - which I checked very carefully and found to be legitimate. I have reset the password to a 16-character unique password, and will reset it again soon. My concern lies in how this has occurred. And now I must reset all the passwords.