I assume you also have hosting by your DNS registrar hostican? I'd notify them of what happened and have them find out how he got access, unsecured pw files or some vulnerable application. Have them fix their shit and obv change your passwords to strong ones, min 12-15 characters with alphanumerics and special characters.