We got scammed the exact same way a few years ago when we first started out. It was clear the account was never hacked but paypal didn't bother to investigate it. Luckily we had withdrawn the funds and just refused to give the money back to paypal because it was their poor security that allowed it to happen!