That's a rare bug. Not a single reply to that thread. 99.999% of the time, buyouts are instant.
Although how was I to know that?
I'm not convinced there's any actual security breach, but Blizzard has been doing a pretty terrible job of explaining the authenticators to their players.
"While no security method is 100% fool-proof (even Authenticators), please note that it is possible that players reporting to have been compromised while an Authenticator was attached to their Battle.net account may have been using the Dial-in Authenticator. The Dial-in Authenticator does not provide the same level of protection as the Battle.net Authenticator or Battle.net Mobile Authenticator app, and -- more importantly -- is not currently supported for Diablo III."
Post made by Community Manager.
C'est la vie, I guess.