I agree with muslol67

If you didn't have a virus, didn't access a phishing site, didn't use a compromised WiFi, then the only way is that someone got a hold of your private key and used it. If it wasn't an internet-based attack, then it had to be compromised physically. Think about who might have access to the phrase.