Almost every lost account was not broken into through a server flaw: it was handed over by its own owner, without noticing.

What the team never does

• Never asks for your password, on any channel, in any situation.
• Never asks you to open a site other than this one to "check" your account.
• Never offers items or coins in exchange for access to your account.

Any message that does one of those is a scam, even if it comes from somebody you know in game: that person's account may have been taken first.

What you can do today

• Use a password you do not use anywhere else.
• Confirm your email and keep access to it. That is how an account is recovered.
• Keep the recovery key somewhere other than the computer you play on.
• Be wary of any program promising an advantage in game. Most of them exist to steal passwords.

If you think you lost access

Use lost account right away, and change your email password first.