Still doesn't quite make sense. You wallet is password/pass phrase protected right? You would have had to enter the password to send out the coins from your wallet. The only way would be if they never entered your wallet because you thought the other address was yours. If that's the case, that was a very expensive lesson learned. The saying goes......... The best lessons in life aren't cheap.
I hope they return them to you......