Any recent hacked accounts from Southperry users?

While this is not precisely written, it sounds like changing the password did not prevent the hackers from relogging onto other characters. This makes the 'logging bypass' theory sound more likely.
Edit: On re-reading, not entirely clear what what the order of events is, so who knows.

Lacking clarification I would actually interpret that as "I logged into the website and changed the account passowrd while the hacker was already logged into the account, which didn't stop the hack."