dutchbrit - Just before things blow up ; it might be useful to recollect what other services use the same username / password ( and fix them all as well ). Mails / Banking / Wealth Management ( like personal capital , wealth front , Mint etc ) and Money Transfer ( Western Union etc) , online shopping accounts that have saved information of your credit card - And Change the password for all of those too.
If you are a programmer - make sure no one logged into any of your AWS ( or any such public cloud accounts) and generated another pair of keys. You might not realize anything now , but the attack might come when you totally dont expect it. They might spin up instances and have a few 1000 $ swiped on your card. ( Amazon will still charge you in these scenarios )