This is basically a perfect example of being careless,which resulted into big loss,you shouldnt be showing your portfolio to anyone especially when you have millions of dollars because it might be the reason why your life will be in danger.As far as we can see these scammers can easily get into our email addresses,even if you have 2fa enabled,that is why we should be protecting informations.