Someone stole my 8yo's Shiny Giant Nessie

My kid is in tears because apparently a hacker stole his favourite fish from his inventory. I don't know enough about the game to understand how this works. Can anyone explain how a fish can all of a sudden be stolen, and what we can do to prevent something like this happening again? Thanks.