#4 - Sept. 2, 2010, 10:01 p.m.
If someone was able to attach an authenticator to the account, that is an indication these individuals also had access to your email address, Dusklurker.
Before an authenticator can be added to the account, a verification email is sent to the registered email address. Once this email is verified, the authenticator is successfully added to the account.
It appears as though the representative that assisted you emailed you instructions to remove the authenticator from the account. You may wish to thoroughly secure the computer before moving forward.