Was it actually GoDaddy security that confirmed your account was being compromised (or attempts were made) or just your theory? I would think that GD security would be much more proactive in their approach (i.e. immediately transferring your account to a new ID and placing a watch on it, etc etc... ?