Call me paranoid, but I wouldn't trust an account after somebody has broken in. In that case I'd create a different account with a different password, possibly

Call me paranoid, but I wouldn't trust an account after somebody has broken in. In that case I'd create a different account with a different password, possibly at a different provider, and tell all people that my email address changed. Maybe I'd also create a forwarding from the old to the new account, but only for transition period over a few months.