I didn't download anything, and I left the game ASAP, so I highly doubt that hhe could get my password -- unless, say, he logged my IP and hacked me like that?
Either way, passwords to all accs have been changed, and I hope that's enough.
For the email thing, do you mean that even if he stole my account and changed the password, I could get it back and re-change it?