I just logged in to find a bunch of new characters by the name of annabellez on my game D:. I was hacked over the many month period without playing wow. I had to do password recovery to get access to the account but how did they find out my password. I'm scared.
Also, the person has created a bunch of level 2 briest/warlocks/mages/shamans
spread out amongst many servers it's taking a long time to delete them all.