I am quite surprised they were even able to get my password for the exchange.
That's the real mystery in your story. One of the devices you use to login to Cryptopia is probably compromised... I would be very careful about using them until you figure out the hack...
I am not quite sure either how so I guess I will just have to stick to not using any exchanges and passwords on any of my devices for a while.