Have you ever been given a login page where it is asking for your PIN? If so, you've been phished, and that's the only way I can imagine someone would have gotten access to your account.