It happens a lot, for financial gains. It can be caused by a weak password after the 2015-hack, phishing sites, or probably other means too.
Just delete everything, and welcome back!

What's not normal, is that an account thief doesn't change your password! Normally, you wouldn't be able to log in anymore.