This really sucks man. Sorry to hear that. Just keep your password safe and make sure the steemit account is the only place you're using it. I've grown to be worried about all the 'apps' that appear dedicated to steemit.
Could some of them have key-loggers or could some people use the same pw to auth there too?
That's a major exploit.