A hack is leaving users locked out of their accounts.