I did change the password but didn't even consider that the email attached could be used to get the account back. now I know. another expensive lesson.