My experience comes from a specific niche: MMORPG botting which using an automation script to train/goldfarm for the account while the player is not at the computer. This is coupled with a large amount of account scamming/hacking such that it is fairly reasonable that someone might have stolen your account and botted on it for their own gains.