I started a website for my clan, and the password was the same as my RS pass. One day I logged on suddenly finding myself standing in Fally, (I started in Varrock) all my money was gone, and my full mith was gone too. I asked my friend, because he knew my password for the website, because he helped edit it. He said it was his other friend. (How he got the password is beyond me...) Well a few weeks later, that friend of a friend came to me and was like "It was [the friend] who did it!" when I confronted him. Both denied doing anything. I deleated and blocked both, since nobody wished to come forward with the true theif. Since then, I'm extra careful and I change my questions on a monthly basis, plus I changed my pass.