Hacking would rarely be the case to be honest.
More likely that your friend had an easy password or that they gave out their login information. You can PM a staff member by just looking in the online user list for a colored name, or visit any of the staff threads(one of them is linked from the front page).
