Here's the thing: you could also have been using a VPN to pretend your account was being accessed from somewhere else. However unlikely, we have no way of knowing what happened for sure.

If shasan had lent you (your account) any amount of money, you would be 100% responsible for paying him back. So even though nobody should lend to you ever from now on, I hope you at least learned a lesson about account security.