AD Account Hacked

I haven't used my ad account for the past 4 years. I did good transaction on it previously. Out of no where I got a email that ad is approved and running. I checked and it already spent $135 and I am not even sure whose card is used. I closed the ad and tried to pay because the card information is most likely not mine. This disabled the account.

Do I need to do anything else? I also changed my password.