Yeah, definitely change your passphrase and PIN! Post back here if you can't get into your account - that would mean you had tried to login via a phishing site and will need your passphrase reset by SR Support.