I've been encountering this problem too. I changed my password and encrypted sensitive notes, but I don't know what has been compromised. I was very alarmed to discover my account has been getting accessed multiple times each week with IP addresses from everywhere around the world. What can I do to prevent this from happening in the future? It's very inconvenient and alarming.