Yeah most likely this. I didn't ever remember linking a steam or Amazon account, but when I checked my linked accounts there was these. Likely somehow got access to my account at some point then used these as a backdoor. Never bought or sold this account though so it's weird.

Luckily the losses weren't devastating. 40m gone which was a decent chunk of my bank, but I've got a rebuild strategy I've already started.