Yes, to fix the error or to treat the threat Op or anyone in similar situation can just change the email as soon as possible before the other party denies you the access since you still have access to the account and then put your own valid and verified one to keep your privacy secured.
At same immediate effect, also change your logging password before the hacker denies you access to the account.
Changing something for account security is good like what you already recommended: change the email address, change or use a strong password for the email, change 2FA of that email account, change to a strong password for forum account.
There is another thing to do for securing the account: signing a Bitcoin message from private key that you own and stake that message and the Bitcoin address in this forum.
Stake your Bitcoin address here.If possible, let's do staking your PGP key.
The BCT PGP/GPG Public Key Database: Stake Your PGP Key Here.Generally for security, privacy and account recovery.
Forum account: security, privacy, and recoverySecurity and Privacy Encylopedia.