I've been following this disaster and of the hundreds of people reporting on their experiences, this person seems to give some good advice: https://twitter.com/Nikimarie673 Best luck to you!!
I wish an official employee here would give some guidance on how to prevent this from happening in the first place.
Same issue happened to me. Still dealing with this.
Last person I spoke with in the Security Department admitted to me that THOUSANDS of accounts have been hacked this way.