Same happened to my sister in law's account with Microsoft's Xbox. Seems that if you change your password to the email account you registered with it should protect you. Make sure you use a strong password using symbols as well as letters and numbers. Unfortunately what the lad has lost is lost.
UK's best mobile network 2016: best 3G, best 4G, best mobile networks revealed