Once they get your password they can change the secret word or question in your account. In fact, they can change all of your personal info at that. Shouldn't yahoo have a past record of these things so they can tell from the day it's been changed? I think it would help greatly.