I had something similar happen to me too, actually. I woke up to a call from my banks third-party account security services who, in an automated way, asked if i had indeed attempted to place ~$160 worth of charges on my account. I said no, hung up and called my local credit union to ask wtf is this? They said there has been attempted charges that not only took every last cent, but two more charges after that (thank god I turned off overdraft 'protection'). Long story short, after a back and fourth session with Microsoft reps and my credit union I had a chargeback and got my funds returned and my X-Box accounts MS points completely wiped (I had a couple dollars worth before this happened, didn't get it back.) Anyways, everything is fine now, except for lost MS points.
The funny thing is, the guy who hijacked my account tried to buy ms points then use them for gold family packs.... just to play Fifa? Wat? He didn't think to reset the password or any details.... but the funny thing is, I've NEVER told anyone my password and it just happened. It DID occur right around the PSN hack that shut it down, but I used a different password for XBL. Why do they do it anyway? things like this, I would guess, are corrected fairly swiftly? Had things going in an afternoon, after I got out of work. Won't give Microsoft my credit card details again.
Anyway OP, I hope things go well for you. You should have disabled overdraft protection though. Don't need the extra hassle of trying to get THAT wrenched out of their cold dead hands as well. My local branch HATES reversing overdrafts. Tried getting a ONE CENT overdraft fee reversed, they weren't having any of those shenanigans. Disabled overdraft after that.