I once had somebody take over my old personal PayPal account. I had what I felt to be a strong password and only used it from time to time when I had something to sell on eBay. I hadn't used it in 6 months when suddenly I got e-mails from PayPal telling me that there were holds placed on recent transactions and that I needed to re-verify my account. There was a bank account added to my PayPal and $3000 moved in from one PayPal account and then out to the new Bank Account, and then a chargeback/refund by the original sender which left my account at -3000.

It took about two weeks to clear up, thankfully I hadn't needed to use the account during that period.