It's really more of a social engineering thing than a proper hack.

The lesson there being not to trust apps, random links, or anything remotely suspicious online. Hacking means they forced their way in; social engineering means they got you to let them in. I feel bad for you, because it sucks, but just let it be a lesson for the future