Tons of assuming in this thread. OP where's proof it was definitely repair shop?

maybe icloud compromised?

password reused somewhere else?

correlation isnt causation just saying