@OP

I'm really sorry this happened to you.

You mentioned that SE removed your token after you contacted them.
If you were using a security token, how did the perpetrator get into your account by phishing your password?