I'd call the help desk post haste. That's exactly the kind of behavior you'd see if someone stole your account and changed the password.