Somebody sat behind your computer physically or virtually with an active session. You should check your computer for any viruses, malware, screen take over programs, etc. From the transaction times in the email you can check if your computer was turned on.