is STILL being used
You should start with a negative trust from yourself and from a DT on that account until the things get settled.
Else you may end up with the account back, but with whatever debts or scams (and trust feedback on them) the hacker is attempting from your account.
Good idea, a DT should give that account a Negative Trust temporarily so that Bounties and other campaigns will not accept him. Because it seems like the account was used to earn money from bounties.