Oh dear. When you went to change your password, did you do it by clicking a link in the email, or by typing the url into your browser? Also did you see these fraudulent transactions before or after you changed your password? If you clicked on a link and did it, you may have been at a fake version of the PayPal site, which has grabbed your information.
Bookmarks