I had something somewhat simillar happen (the jacking).
I got an email in my hotmail account from someone in, I think it was China, thanking me for the purchase of three prom dresses. I then noticed there were a few more emails thanking me for some purchases.
I thought WTH, and went to my paypal account. One of the sales had already gone through, so I hit panic mode and called my bank. I emptied the checking account I have tied to paypal and transferred my funds into a savings account.
I thought I was safe.
Then a few days later I noticed more money had been removed from my account. The reason: I had forgotten that I have overdraft protection for my checking account from, you guessed it, my savings account.
In the end paypal refunded all my money, then asked if I wanted one of their keys (secondary safety sign-on device).
Was not fun. Quite scary, actually.
Hope all turns out okay for ya.