I agree with this but as mentioned, unless they got your email, not to mention passcode, paypal is pretty safe. Wouldn't call it the end all, be all but if they have enough info to crack into your account to order whatever then paypal is really the last of your worries. You've fucked up...