In my opinion, that's impossible, exchange steals your ether, and there are a number of possibilities that you need to test,
it could be that you entered into a phishing site, there could also be someone who know your private key, or you activate VPN when accessing your private key.