Not 100% sure how it happened but only used Paypal on my personal computer. I went to the bank and they fixed my balance but I can't buy anything only because my Paypal is negitive.
Local network intrusion? Someone got hold of your email and from there your bank account?
I assume you've signed into your email other places. Unsecured hotspots maybe?