You may want to change your password for minecraft just in case, but its more important you change anything you have credit card details connected to, in particular amazon payments as its confirmed that amazon has been effected by the exploit.
anyone that can read this i advice you to change your password. not just mc. every city you know. a huge security leak has being found in the most used security web addon. read more about it here [link]
TownyPvP no longer has lockette - was a long time in the planning but i never got around to removing it. Now the raiding, pvp server has the ability to let you raid - which it didn't before due to too many people protecting chests - have fun
Actually bad login is meant to mean your account is fake, usually the authentication servers work fine, send the error to fake accounts and allow others on, except the legacy authentication server (version 1.6.4 and below) has bugged
but what I find odd is that Bad Login usually only occurs if you are already online a server somewhere with that account