Recently, I have noticed various people stating their accounts have been compromised - but not by using third party tools, but rather through keyloggers, spyware, etc being placed upon their systems via ads on web sites.
Also, I noticed people being unable to regain their accounts if hacked or stolen. I suggest that the person with the original account keys would be able to freeze the account and ban the IP that stole/hacked the account. Also, stricter measures to ensure that accounts aren't accessed from too far of an outside source might be that you have to verify further information in order to change your POL password and CC information, perhaps such as proving identity of account holder and original registration key(s) that was/were used for that account.
I suggest tracking the perpetrators who hack/steal accounts, returning sold/stolen items from the original account, and return the account to the rightful owner with a new password and ID number.