But that private key requires a password or keyphrase to use it and I'm having trouble understanding how this could have been compromised?
Of you are using idex through input your privatekey and it doesn't require any password. It's the worst part right now. Maybe you are getting hacked or another possible thing your desktop has been infected by malware and your privatekey has been stolen. so many scammer in these days.