What it means is that my user login was actually hacked. Got the https thing rolling now, just have to finish implementing it. That should help. I had the hosting company tech use the tools they have at their disposal to determine whether or not it was intrusive in that way, or only me. From what they saw, it was only me.