[phsource]

To be honest, I think email accounts (especially the main ones) have always been a huge target to thieves, since many services still use it as the primary password reset/two-factor authentication method. In that sense, not much has changed.