Try testing your url.
example.com/?author=1
example.com/?author=2
example.com/?author=3
example.com/?author=4
example.com/?author=5
Replace example.com with your domain. Do any of those return your username? There is a stupid bot/skiddie going around doing that right now. As long as your password is quite complex, you shouldn't have anything to worry about.