People being hacked since the last Server Check.

• Hacker purchased 1 arrow for Bow with her remaining ~2k of NX through MTS. (zeroed out her prepaid balance). MTS logs provided the time that she was hacked.
  

Same as my account.... The hacker bought 1 arrow!!!
Well.... On my side of view, it is more likely that the hacker DCed the character and log onto the account instead of a surf hack.
As far as I know, the character needs to be CCing/entering a portal to be surfed.
By the way, are your wife other characters are not considered as high level?
Because the hacker only stripped my high level characters, mules are remain untouched. If that is the case, this might be why only one character is stripped.