I think you should do at least the following two things: - change your password - check sessions on lichess.org/account/security and revoke those that seem suspicious to you. I don't know if you should also report to lichess, maybe somebody else knows?