Just an update. Account hacked.
Nothing on my end. Everything is secure and I scanned thoroughly. I use different e-mails/passwords for different games, use junk/dummy info on fansites.
Only thing I did find was my password on a hashlist of cracked or in the process of being decrypted passwords. It wasn't the strongest password but it had numbers/letters and was 9 characters long.
Made off with about 500 mil. Luckily most of my gear can't be destroyed but it seems they're keeping my gear intact, probably with the intention of botting.
NCsoft has no checks in place for changing secret questions/email, so I didn't even receive an email when they changed the password. Was pretty well orchestrated considering they logged in right after NCsoft support business hours.