I am still not quite convinced.
The obvious Blizzard post:
http://eu.battle.net/d3/en/forum/topic/4309703662They still claim no accounts with authenticators have been compromised, and until my authenticator protected account suffers such a fate, I will continue to believe so.
It is also extremely easy for a knowledgable person to create a realistic "clone" of a website, and people can enter their information without realizing it, believing that they are actually on a Blizzard website. This crap happens all of the time on WoW, and people always blame it on hackers.
Furthermore, I guarantee a lot of the massive influx of D3 players have not touched a Blizzard game in many years, and so are not aware of the literally hundreds of fake Blizzard clone sites. Even the slightest typo when typing in a Blizzard web address can take you to one of these, and you would hardly notice.
Until I see undeniable proof, these "hackers" are no more real than the "hackers" so many WoW players complain about.
Get an authenticator. Seriously. Do it. You can even get the app for free on any modern phone.