I don't know how it could happen if you haven't been phished and don't use the same password on multiple sites, but it's good at least that you're back in control of your account!