Unknown Author Put Putting Posts in Draft

I went to post something on my blog today and there was over 200 posts that were in draft from somebody called bbrumdckhmrj. This happened a week ago and I changed the password, so this is the second time it has happened. I changed my password again and deleted all the posts in draft. What would be the next step in preventing this from happening again?