Just been hacked too. To clear inaccurate things I read in this thread :

Changing password, adding token and even account suspension (!) don't log the hacker out of your account.