just contact support, recover, and change the password to something more complicated. I had a password of random numbers, symbols, and letters once and still got hacked. no clue how, because i'm not dumb enough to get phised for anything, but it did.
Such risks always have a chance when you use free services of any company. You should be switching to professional email services by paying a hosting company and use services with out any fear of hacking.