Yesterday evening someone hacked the Neopets site. They are selling the information gathered on the dark web. Although, it depends on the buyer, it is less about your Neopets account, and more about trying your username, email, and passwords against other sites to gain access there. So if you share passwords with other sites, it is highly recommended to change those passwords on the other sites now. Neopets is aware of the situation and is providing updates via the fansite, JellyNeo. It is being advised to change your passwords on Neopets as well, however, the person selling the information claims to have live access as well so it would contain any new passwords. Stay tuned to JellyNeo for confirmation the breach has been closed.
Keep yourself safe with using unique and complex passwords for every site you have an account.