No, the password wasn't given over. Since I was quite active in the old trivia mini-game thingy, my account was quite known to many. Someone probably tried getting into it, and since the password was quite easy to guess, they took it. The password and email were changed. I can prove the accounts are mine since I probably still have the first email that was used for 'Porygon' account. If Device data/ IP or any tracking data is stored (As I read in some other post I think) one can see the clear discrepancy in account usage and sudden trading of pokemons. (As far as I remember, I never traded any pokemon)
I don't know when exactly it happened, since I wasn't active then. When I came back, I tried using another account (Porygon2) to contact people but failed since the account seems to be banned (Probably assumed I was phishing or something). Hence I wanna make sure why Porygon2 was banned just to confirm.
I gave up on it after a while, but now making a new account and seeing that my previous account is still there, I just wanted to see if I can get it back.