I had 2 step verification, bank pin, etc. My account was hacked into and was used for rev cave farm as a bot. When I finally got back into my account I had about 15m gold taken from my bank and my character was holding a holy handegg in GE. I don't know if there is anything to be done about this but I would enjoy some kind of confirmation about it if not. Thank you for taking the time to view this.
Jagex doesn't reimburse players for any lost items from any source. I suggest you change your password on your email and runescape account, as well as changing bank pin etc. If you were hacked and had a bank pin that means it would have taken 3-7 days for the pin to be removed. You must not log-in often or you would of caught it. Good luck