I tried to log in to Apple Developer Connection this morning to find out that my password had been changed and the email associated with my account was now a yahoo.com address that wasn't mine. Luckily, my "security question" was still the same, so I was able to reset the password and email address back.
Based on the emails that have appeared in my .Mac mailbox, this was accomplished by sending this classy one-liner to Apple:
am forget my password of mac,did you give me password on new email marko.[redacted]@yahoo.com
this is a PR catastrophy for sure. I'd guess this will turn into a fire on the net within 48 hours.