how the hell did i get hacked?

i have never given anybody my account info. whoever went on my account spent 300k gp on crates. now i have a shtload of unopened gp crates. and u know what the funny part is? i already have all the gp crate guns. i already changed my info but i still dont feel safe. once again, i never gave any bit of account info to anyone.