Unless, of course, your e-mail address is for a company you don't work for anymore. Lots of old accounts are like this. Evony doesn't allow them to be updated. In this case, the bad guy appears to have purchased the domain after determining the e-mail address, then did a password reset after creating the e-mail address on his shiny new domain name. Shouldn't take too much to figure out who did it, though I'm sure some steps were taken to cover his/her tracks.
I'm actually looking forward to having a lot more free time on my hands if this isn't resolved -- more money to spend on toys instead of Evony too!

Bookmarks