My Steam got hijacked a year ago. The hijacker got my password by exploiting a bug in Hotmail's security so he was able to recover my account.
The friend got me VAC banned, so I had to start a new account and buy all the games again, as "you are responsible for the accounts security".
It's bullstuff.
Hope it doesn't happen to you, mate.