It seems I've been hacked. What now?

They changed my account's e-mail and I can't log in because I can't reset my password. I've already sent an e-mail to Square Enix's support.

How does Square Enix handles those things, anyone have experience? Will it take too long?

Not personal experience, but happened to an FC mate once. As far as I know, after confirming they got hacked, SE rerolled their account to a prior state. They lost like 3 months worth of game progression, but got their stuff, that was stolen, back mostly (apart from things they got during those 3 months).
Anyway, getting in contact with support asap is definitely the first step of action.

shouldn't have they been locked out when they tried to login from another pc. When I even reset my router it locks account and makes me redo password. Unless they already had your email as well.

I have never experienced this, but I would recommend getting a security token or even the digital one. It's quite handy to avoid things like this in the future.

Hope you do get it sorted out though.

What Esp said!
That security token is pretty great. I think theres also a phone app doing the same thing.

Should contact SE directly through chat or phone for fastest response for something like this. Unfortunately SE is not open on the weekends so you will have to wait until Monday to get a hold of them.

Happened to me once years ago when I started playing WoW and was still fairly new.

Ever since then: Whenever available -> Security Token. Always. Always. Always.

The smartphone version is free of charge and super easy and quick to set up. You also get a security password to remove the token if ever necessary.

Dont think this "wont happen to me anyway". Could happen to anyone.

Just a general piece of advice to anyone not using one.

I'll adhere to what others have said already. Security token, I use it for every game now.

For what it's worth, if they do a roll back hit me up in game and I'll do what I can to help you get back up to speed.

So as someone else said, when you try to log in from another location, it locks the account until you go through the reset password step.

This means they have your email password to, and potentially have access to way more then that. Change all of your passwords, and do it fast. It doesn't take much for something like this to snowball into identity theft.