If you were phished you must have tried to log in via a phishing site and entered your pin number, it is the only way your coins could be withdrawn from your account. SR never asks for your pin a log in, if you find yourself being asked you are on a fake SR URL.