Got two emails today that said I purchased 4000 points, then 800 points. I checked it out and the hacker bought some arcade stuff, Fable add-ons, etc... They then transferred the licenses. When I fired up the xbox, there was a message stating that my gamertag was last used on another console. So...my account is on lockdown for 25 plus days while the investigation is done. They said they will link another gamertag to my achievements. We'll see how it works out.
I wonder if there is a hole due to the update yesterday. I wanted to give a heads up to others.
Edit- I was able to get the console ID that the licenses were transferred to and submitted that information to Microsoft.
The hacker just tried to sign me on while I was on-line. I was able to re-log the account.
Here is something that may help others:
Go to the Settings tab and then account option.
Arrow over to the "Your Information" screen.
Select the "Password at Sign-In" option and change it to require it for all other consoles.