I just discovered this happened to me a few weeks ago. A Russian person logged in to my account, played some BF3 matches and downloaded the Russian Fifa 14 demo, which is now stuck in my games list. He added a couple friends but that's it. Didn't change anything else, oddly enough. I still feel violated though. I went ahead and implemented their version of steamguard so hopefully it won't happen again.