Most important question . Did you purchase theme or download a nulled version from internet or torrent .
If you using nulled theme (Which you should not be doing anyways), sometimes the person sharing it adds extra info to the codes which somehome opens a back door or i can say notifies the person that his theme has been installed in xyz.com and then kaboom ..
Also if you have problems with wordfence try moving to akismit .