People are reporting a lot of issues with the new Humble Bundle website, such as 2FA codes no longer being necessary. It may be good to change your password.

I just did, and:
1. I did not have to enter my old password to set a new password.
2. I did not get a confirmation email that a new password was set.

So if someone steals your Humble Bundle account, you won't even know it.