I would use
https://mtgox.com/contact-us and also send an email to
admin@mtgox.comExplain your situation and state that you don't want any withdrawals happening.
From mtgox website
"Warning: As a security measure, you will be unable to make any
withdrawals for 24 hours after changing your email address or
password."
So you have 24 hours from the possible break in.
If your email password was compromised then you should think about how that was possible.
Also a good reminder to use two factor login.
You don't need a smart phone for two factor login.
Can use JAuth - available on github.