My account got stolen once as well when I took a break in Cata, got it back with bags full of pyrium ore.
I never activated the authenticator because I thought I need to use it by every log in, but if thatās not the case, Iām activating it today.