See the following Apple articles :
If you think your Apple ID has been compromised
If you think your Apple ID has been compromised - Apple Support
Personal Safety User Guide
Personal Safety User Guide – Apple Support (UK)
- Intro to privacy and safety tools
Intro to privacy and safety tools – Apple Support (UK)
- Use these checklists to quickly learn how to control who you want to have access:
Limit access checklist
Stop sharing checklist
Manage location sharing checklist
Delete suspicious content from your devices
Delete suspicious content from your devices – Apple Support (UK)
Contact your bank, they can find out who (name, address & account number) has collected the amount from your bank account, and when.
Ask your bank to block your card and ask a new car.
Depending on your bank, they can collect the amount back within 30 days.
Also report to the police.