Just thought this advice would help you and others:

It's good to change your password for both your mojang account and the password for your email address. Make sure that you don't use the same minecraft password for any minecraft-related sites. If I would take a good guess, all these reports of minecraft players being 'hacked' are because they use the same password on other minecraft sites which are far more insecure.

If you find yourself to be quite a computer competent person and know your way around tech, I suggest you use the chrome extension - LastPass

The website explains what it is pretty well, but I can summarise by saying it:

Encourages you to use unique passwords for every site you login

Remembers all website accounts you have, both email and password

Makes it more convenient to login with auto-fill

Allows you to store secure notes, so it saves you leaving paper and files around your home with secure info

All secure information is stored on your device, accessible from that device. LastPass servers don't hold that information.

Warns you of breaches, encourages you to change the password as soon as possible.