I cannot log into my accounts I am being asked for an authentication code even though I don't have an Authenticator attached. Also, I checked my characters on wow armory and all of them are without gear. So I got hacked I guess. Can anyone help, please?

Thanks

Oh my, this looks to have happened before as well.

I'll post fuller instructions below, but you need to find the source of this or it's very likely to keep recurring.

----------------------

If an account has been merged to a Battle.net, or if an email has been changed, or an authenticator added to the account (not the player's own) one of your first stops is going to be Billing. They need to get those sorted out first so the rest of the processes can continue.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available 7 days a week, 7am to 8pm Pacific Time
E-mail Support - Billing@Blizzard.com

Players in Australia should call 1-800-041-378
Players in Singapore should call 800-2549-9273
Players in Chile should call 1230-020-5554
Players in Mexico should call 001-888-578-7628
Players in Argentina should call 0800-333-0778
All other international players should call: (949) 955-0283

Now, it's very very important to figure out where the security breach occurred. If they CAN get back in, they WILL be back. That, unfortunately, you can count on.

These two stickies should prove helpful.

Computer Security Recommendations
_____Computer Security Recommendations

Account Compromise Info Center
[[ Account Compromise Info Center ]]

You may also want to look into getting an authenticator for your account. It's no substitute for good security habits, but it will help keep them out of your WoW account.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

I do wish you all the very best on a speedy recovery.

Well, for starters - you can't allow anyone else on an account under our terms of use - even a sibling.

That also means you have multiple systems where this issue may exist and multiple systems that need their security checked. That's presuming only two are in use and once anyone else has that information there is just no way of knowing where it may have been used.