This site has had massive breaches TWICE in the last 12 months.
They have not disclosed these either times. Hackers managed to gain access to administration tools which let them access and change the information on any account they want. Which they did, and support does not reply to tickets to try and recover the stolen accounts.