Okay so recently i saw my buddies account starting to come online again. Though there was something strange, the account was always logged into his lvl 80 shaman and was always in hellfire ramparts and noone answered when i talked to him. I asked my friend and he said he had not used the account for a long time, he said that he didn't even had any game time on it. I'm guessing some gold farmer got his hand on the account, i have no idea how though.
So my theory is if you have an account that has no game time on it you can go to some hacking site and type in your account name and password and the hackers will put on gametime so that they can farm or something on the account. Then you just report that the account has been hacked and get everything back. Anyone with an old account that can try this? im unable to do it at the moment, 2 weeks til my time run out :S