First of all, be sure you let CGT know this through contacting the Support/Help dept. Then be sure you change login password for both CGT and Paypal accounts immediately, if you haven't already done so. In fact, I'd go ahead and change every password for every social media or login I have. There's obviously been a breach of your security somewhere. Good luck!