Forum Discussion
While it's certainly possible your user account was hacked, someone would not be able to add another Roku to your user account without access to your email account as well. So anything appearing in the Resume Watching would have to come from your devices. The one possible exception is if someone could log into your account on a Roku app, which does permit viewing content on The Roku Channel, or logging into The Roku Channel on the web page, again using your account.
Since you found the PIN settings were changed, it does seem possible your account has been hacked. With the password changes you made, you should be OK again.
Why would someone hack your user account? I can't really say, but it does sound like they were trying to use your account to access content and get you to pay for it. If you have a credit card attached to your Roku account, I suggest removing it as well.