Fraud - someone ordered iPhone using my account
About a week ago, I called up AT&T the moment I got an email about someone changing my personal details on my account. It turns out the change was made from an Apple store in another state and the person changed the address and name on my account. I reversed the changes and changed my security codes, and figured that the problem was solved since I didn't see anything about a phone being ordered. The AT&T rep also told me that nothing else was done on my account and they have annotated that the account was fraudulently accessed.
The next day, my phone loses network connectivity. I call AT&T again and it turns out my phone was deregistered from the account and a new phone was added to it. I inform the rep that my account was hacked someone must have ordered a new phone on my account. I still never got any notification of an iPhone order on my account so I figured I would try to stop them from receiving it. The rep tells me that I need to call the Fraud department. Over the next four days, I spent nearly 10 hours on hold in total and did not get to speak with anyone. During this time, I finally get billed for the phone.
Today, I get new notifications that someone has added a new authorized user to my account and that I am now locked out of it. I have now called AT&T three times and each time they transfer me to the Fraud department. I even went to an AT&T store and they couldn't help me. I have changed my access code and password multiple times, and told AT&T about the fraudulent activity early on, and yet they have done nothing about it.
Is there anything else I can do? Can someone here please help me with this situation?