Considering the safegaurds steam has put in to hack into a persons account it would require them to get the password for the account, the email address and the password for the email account making it effectively incapable of being compromised. And steam a whole being hacked has not happened (to my knowledge at least.) It's probably just a glitch in the system.