User Activity

I had a message from PayPal stating I paid for some goods I didn't order. How do I rectify this. I've been hacked or something.