In my case, I had already set up wire transfer (bank) information in my account, when the hacker got into my account he simply modified my bank wire to his (an overseas accout) He also hacked my email account so when the "token request" email can in he read it and entered it, this all happened within 1/2 an hour. Before I had a chance to call IB a wire request withdrawl was entered, token sent, email intercepted and replied to. Know I don't know what would have happened had I not seen the emails and then my account that day.. maybe there would have been a way to retreive the wire transfer.
Morf