Possible Nexon Database Exploit?

..Yes.
It isn't hard to delete 4 emails, that completely clean off your record and cause confusion like is currently happening.

I agree. They hadn't changed my password at all, so I can't confirm whether they actually had access to my email or not. My mom asked my dad if anything suspicious had been emailed to him and he said no, but I was like, "F7". I know they don't understand, so I just told my mom to change the password and watch out for anything else such as eBay, PayPal, etc.

Ugh... Could it be that they really did get some info (lol nexonsecurity) but instead of going wild with them they're just taking it slow, in order to not raise too much suspicion?

Danny's proposition is the most plausible to me, at the moment. It's possible they've had my UserID since '09 and just now hit me with it, despite how long it's been.