If your user name is known, a brute force attack can get into pretty much anything, it's just a matter of time. Though, most sites have things to prevent that, such as a lockout after X attempts that are wrong.
This is why special characters are good in passwords.