Some time ago I noticed that there are two versions of unrealsoftware.de (once I typed address without www. as I'm used to for every address and logged in to site but it was really laggy so it made me suspicious and I remembered that real site started with www.)
So, is it a phishing version of us.de? Maybe that's the cause of stolen passwords?