I was also hacked this weekend on my account with an authenticator attached. I had signed on to the mobile Armory iPhone app just the day before, which I only do maybe once per week. Two toons had all the items in their bags vendored and gold drained. Another just had gold drained. Yet another gear stripped and sold and gold drained. Six others were untouched.
Thankfully Blizz restored my account and items within only a couple hours after I contacted them. I responded to the ticket asking how I could be hacked with an authenticator. Of course their response was "that's impossible so you must have a virus". Now I know my PC isn't infected with a keylogger and I've scanned it with several tools to make sure. Then this latest news item hits and it's pretty clear something fishy is going on.