Security issue – admin password changed

Hi guys,

I’m using the latest wordpress version since a couple of weeks. I received today 15 emails in a very short time telling me that the admin password was changed to XXX (different password each time).
I checked very quickly and indeed admin password was changed. I didn’t even try to understand I just did a “Deny from all” in Apache. THIS IS WEIRD !
There are 3 administrators in this blog:
– the default “admin” account
– “axel” which is me
– “matt” who is a good friend of mine and he didn’t update any password.

I tried by myself to restore the password and I received a “Please confirm your choice” email which means there is a confirmation step. How come someone has changed the admin password? The admin email is mine, nobody else has the password. Isn’t there any security issue?

Cheers

PS: I use the Private WP plugin

Axel