Thankfully they fixed the login issue I was having...
which allowed me to go in and change the password and autoreplies etc.
The account got pwned because their servers only accepted plaintext POP/IMAP/SMTP login credentials for years and years and years. Probably still the same, actually.