We're excited to announce that we've fully migrated the Xbox Forums to their new home, here on the Microsoft Community forums!
As of today, going to forums.xbox.com will redirect you here to the Xbox area of the Community forums. We've moved all of your existing threads over so you can continue and start conversations with the new forums experience.
We sincerely appreciate the feedback you have provided over this transition and can't wait for you to check out the new Xbox Forums!
Either you gave out your information, phished or you were social engineered. If you gave it out tough luck it is your responsibility to look after your account. If you were phished you could of gave your details unwillingly to a unsafe website. If you were
social engineered (Rare) you must have information out there on the web that has been used to gain access your account. I would just do what Owen says and give support a call and open an unauthorised access case. They will investigate your account and take
action on whatever they find.
In the last few months did you ever have to recover your account back onto your console for no apparent reason? Did you leave your console unattended while any friends or family members (like a sibling) were around? Is your account
pass coded on your console?
One thing you may want to do then is call support and open up an "unauthorized access" case with them. Anything that was done on the account during that time would not go against you (as far as I understand it).