Unless they have the pass words there is not a lot they can do however now they have your email address make sure the emails that look like ebay or paypal emails are legit and if they ask you to click on a link in the email then do not do so.

If you click on the link you are taken to a page that will ask for your paypal address or ebay ID emails or ID and enter your password.

If you do that then you have just given them info to access your account.