Originally Posted by MSPeconomist

Definitely change the email password and also any accounts that might be discoverable from your email account. You'll need to watch everything carefully for a while.

Did you ever get an email notification that the password on your account was changed or were the scammers happy to use the passwords you selected?