Trials aren't automatic, are they?

My account's been inactive since about the time I got laid off last spring, alas. I hadn't opened anything from Blizzard, nor pretending to be from Blizzard, until I just got the notice that my account was suspended for 3 hours, and the follow-up password reset email. I've updated my pw, antivirus scan on my laptop found nothing, and the gaming computer's been in storage for the past 3 months. My email acct did show access from an IP not belonging to me a couple weeks ago, and I changed its pw at that time. Shame on me for using the same pw for both email and battle.net even though it was otherwise a pretty strong one, I'm thinking, and that's also been fixed.

The part that confuses me is that there shouldn't have been an active account for anyone to hack, but as of today there's a 10-day WotLK trial on my account. The FAQ implies that the user has to request the trial, and Blizzard doesn't randomly bestow it on an account just because. So, am I understanding correctly that whoever did this first hacked into my battle.net account, then activated the trial, then logged on to spam their gold-selling site or whatever? Secondly, is there anything else I should be doing or worried about? Once the 10 days runs out, there's no more trials they can add, so hacking my account again would be pointless, at least until I'm working again and therefore able to reactivate my account, right? I have no way of verifying my characters or their possessions, but I'm not particularly concerned about them-- none of them own anything really valuable, I don't think, and the highest of my bazillion alts was 40.