My MEW got hacked and my tokens were stolen. I am very careful when putting my address on each bounty campaign and never sign up online which require any private key. I don't really know how I get phish or how hacker accessed my MEW. I learned my lesson and will never use private key again. Do you have any idea how I get phish? I got one in mind that a fake mew site does exist?
Most probably that you have entered an MyEtherWallet fake site without checking your browser URL in which wrong spelling of MEW was mistakenly entered. Phishing sites are very easy to avoid now as long as you have an updated anti virus and malware protection in your computer so therefore a fake MEW will be possible. To ensure of the safety of MEW wallet better to use keystore file in which it will require your password not the private keys or Nano ledger but expensive.