That is certainly terrible. Don't you use 2FA to secure your account? I hope you've changed your password. I would invest in a hardware wallet to secure your tokens, this way you won't be a victim to this type of behavior in the future. Best of luck.