Have you ever entered your login details and PIN at any url other than silkroadvb5piz3r.onion? If so, you were probably phished and that's how someone was able to get a hold of your account details.