Sign out of every device, reset your passcode, and lock saved payment methods if a login was not you.