The less-obvious risk often is the most dangerous. Protecting your company and personal assets starts with understanding real versus perceived threats.
If your account is vulnerable then you should've already been notified; so if your inbox is empty and you can still sign in then you don't have anything (more than usual) to worry about.
The not-from Zuckerberg tweet on his timeline suggests that the Facebook CEO's password was simply 'dadada,' and it told anyone reading to simply direct message the account to obtain additional proof of the hack.
