What did they do to my account

Wording this correctly so I don’t get my post pushed to the wrong subreddit.

My account was taken over by someone other than me… and once I spoke to Jagex and took back control of my account, I noticed that they had done thousands of clue scrolls?

Is this even a thing? Why and how would they even do this.