I don't know if they've done anything about it, but it can/could be done through an EA site which seems to have direct access to XBL account servers.
i think thats what has happened.
how are they getting your items? aren't purchases linked to that EXACT account only???
i found this article
http://www.insidegamingdaily.com/2011/10/20/microsoft-responds-to-fifa-12-hacks/
here are some of the comments,
Posted by Peter on 17 January 12 at 7:16am
The people that are doing it sell the the points on a website called
http://www.dhgate.com which is based in china and they sell your accounts to people, advertising them as 10000 ms point for less than £25. When people buy them they then send the buyers your login and password for them to recover on to their xbox. I only know this because I bought some points off the website (not knowing how that the point had been bought using other peoples credit cards) and a month or so later my xbox and account were banned because some frauds sold me some illegal points without letting me know how they got them, now I’ve have to go out and buy myself a new xbox and leave behind the massive amount of hours I have built up in playing time…
Same happened to me Hacked Jan 14th found it the 17th all my points gone and 2 Achievements on Fifa 12 which I don’t own. This is the second time in 3 plus years Ive been hacked.
thats what basically happened to me, i dont even own fifa 12
Posted by joshua on 18 January 12 at 11:54am
turd bag, stole my account with fifa 12 and stole 130 dollar in microsoft point, and overdraft fees, i cant believe this is happending jesus christ, someone who doesn’t give a ****, would really go through the trouble of not careing. Believe me when i say this, “dont delete your account without deleteing all your information on it first”. Really finding hard to contact microsoft about this little problem, now i need to go down to the bank and report electronics fraud activity, and try to get my money back, so we dont lose the house. please post more if anyone else, had this problem, and fixed it. at first thought it was a microsoft scam or sheme, just to find out some little fairy fat kid stealing my ****, and yes, i know how wrong that sounds, but true.
Posted by lmephisto on 17 January 12 at 8:24pm
Damn , got hacked last night 17/1/12.
I dont even own fifa 12 , and i found 3 achievements on my tag! They used my paypal account which was saved on xbox and they stole 85 British pounds

!
I hope Microsoft will help on that!!
Posted by Insidious Fiend on 16 January 12 at 5:21pm
Same here. Hacked on the 12th, lost 3200 points. Got my tag back, with a new live ID. Not my original one. Possibly, never be able to get that one attached again. Still no points. 2 FIFA12 achievements.
I blame EA for this though. XBL is trying to clean up the mess.
It’s like when your kid breaks **** and you have to fix it. EA is the bratty kid, XBL is the parent. EA needs a damn good spanking for this one.
Kind of ridiculous that this is even happening, although I guess I can take some comfort in the fact that I am not alone. My account was hacked last night by some jackass that had the audacity to go into party chat with my friends (who obviously knew it was not me). At this point I was called by one of my friends, and when I got home completely redid my password etc. Had to recover my account from another xbox, had 35 achievement points in fifa 2012 (never played it before and I never play sports games to begin with). Checked my billing, which thankfully does not have a credit card or paypal attached, and noticed the hacker spent my 1800 or so MS points on Fifa card packs. Called xbox, went through the phone line. The woman was very helpful, I put in for an investigation, and my account is suspended right now while they hopefully right these wrongs. I just hope I don’t have to wait a month to use xbox live again.
can i remove my card details from my account once its back up and running again