security logs ip change have all the details my friend. i alread said it the account is mostly used and created in the Netherlands if anyone have logic they can see that the accounts ip is now used by a weird country
People move around (and/or use VPN) so changed IP is not the proof enough that account changed hands.
By the why, how come you waited for so long to report the hack?