Same happened to my sister in law's account with Microsoft's Xbox. Seems that if you change your password to the email account you registered with it should protect you. Make sure you use a strong password using symbols as well as letters and numbers. Unfortunately what the lad has lost is lost.
iPhone 7 review: a range of small updates add up to an excellent phone