Same happened to my sister in law's account with Microsoft's Xbox. Seems that if you change your password to the email account you registered with it should protect you. Make sure you use a strong password using symbols as well as letters and numbers. Unfortunately what the lad has lost is lost.
What is ransomware and how do I protect my PC from WannaCry?