This happened to my DH at New Years.
A hacker broke into the
servers of our email provider and;
*Took over DH's @msn email by changing the password (overnight while we slept)
*Sent out phony emails to all of contacts stating we were in Ireland stuck with no money and needed help
*Went to DH's FB and changed the email/password (since he had took over email account)
*Sent repeated messages and chats to all of his FB friends
*Finally - Transferred the FB account and all email contacts/messages over to a new dummy @hotmail account.
As we were on the phone with MSN getting them to send us a new password, it sent a notification to the @hotmail account...and the hacker was changing the password ahead of us.



DH told MSN - DO NOT send a notification because the hacker is receiving them!!!
In the end we finally gained access to the account and saw that he'd emptied out all of the emails/contacts. Although, MSN was able to retrieve everything, we've had a difficult time with the (now disabled) FB account which still is in dummy@hotmail. Thankfully - we had NO private information on the account; phone #'s, addresses, etc.
As of right now, we have done away with FB since it was easily hacked with an email address login.