Got my account cleaned, no clue how.

So, I did use some questing services here and there but I always gave them an alternate password and switched it immediately after the service was done.
Today I log in to see my bank cleared (it wasn't that big to begin with, but it sucks anyways.. Around 40-50m worth of stuff)
So I'm trying to trail it back to how it happened to begin with, my account had the same password as only I use, and not one of those I give to skillers/questers, I never went to some phishing site that promised me free stuff nor did I share the password ever I've now set an authenticator with my phone but I'm still really curious regarding it.. Any ideas?

 

Check if your account is attached to a facebook or email, a service provider mightve done that

 

People have been hacked through Facebook. If a service provider linked a Facebook profile it's possible!

 

An ex employee or the service provider or someone how managed to recover your account with leaked information.

Was your password changed and did you personally have to recover it to gain access again?

 

Were you using an public wifi spots?

 

There's actually a downside that almost no one knows about it. Besides having one password proof they can just go to lumbridge and talk to Hans in order to get the exact date of when your account was created. If you've bought a service more than once from a single guy then it's easier because you've at least changed your password 2 times (considering they were different from each other).

Stay safe! And besides having an authenticator put a bankpin as well. If you had done that you wouldn't get scammed.

 

Keylogger or possible RAT maybe?