Maybe the hacker also had access to your email?
You should followup with them on that. Find out what all he had to know to do what he did. And let us know if they give you that info, because all companies I've dealt with would not help me out at all. (that's my rustle today, why won't you...