Happened to me as well, just a couple of hours ago. Got 2 emails from PayPal confirming 2 purchases of 5000 points. Turned on my Xbox, and it said my e-mail and password was incorrect. Immediately changed my Xbox Live password and deauthorized my PayPal account from Xbox Live. Recovered gamertag from Xbox Live.
Thought I was off the hook. I wasn't.
30 minutes or so later, someone changed the e-mail associated with my EA/Origin account. Managed to change that back as well. (No "didn't you do this?"-link in the e-mail from EA confirming the e-mail change. I had to scour EA's support pages for a little while to get back in to my account. Shouldn't be necessary)
Thought I was off the hook. Still, I wasn't.
A couple of hours later i wanted to play, so I turned on my Xbox, and it said my e-mail and password was incorrect. Again.
Tried logging in to xbox.com to change my password, and it asked my name, and where I'm from.
"Whatevs, security measures", I thought.
Logged in, and xbox.com had made me a fresh gamertag.
"Wtf."
So my original gamertag had been transferred to another Windows Live account. Fuck.
Looked up my gamertag on xbox.com.
"Last seen 1 hour ago playing FIFA12"
"Motherf-----"
Yes, I hate soccer too. Makes all this a tad sour.
Checked my bank account.
2 purchases of 2000 points and 1 purchase of 500 points from my VISA, which, of course, is linked to my Xbox Live account.
Calling my bank first thing tomorrow to report this.
And to top it all off, it's the weekend, so that support form I sent Microsoft probably won't be read until Monday.
(Not exactly the kind of first post I wanted on this forum)
Log in to comment