Caught a hack on an account early

"Info changed" emails are helpful. I received one from Aeroplan, logged in (luckily password not changed yet), found my email address had been redirected to somewhere in .ru. Nope, not me. The phone was wrong, too -- don't know if that was changed or not (was close enough, could have been typo by me, last all correct except last digit -- 9445 rather than 9443). So, I changed password and reset other security stuff as well.