I forgot to mention, I found that as well, of course I changed it immediately.
I know people are wanting to blame EA somehow for these hacks, but if Xbox account security was where it should be then EA(or any other company) shouldn't be able to cause an exploit like this no matter how inept...