Consider yourself fortunate. These stories rarely end with "and I kept my stuff."

FFXI (2003 MMO) accounts used to hacked all the time. Gil lost. Gear lost. Characters deleted, etc. From the day security tokens became a thing, I've never read a post that went "I got hacked even though I had a security token." That's the lesson learned for other readers. Use a security token, never lose your account.