[CVD]

I'd let the bank sort it out, change your passwords and call it a day. When my paypal account got jacked, I figured out it was done from some university campus computer in Kenya. Yay, now what? And I automatically assume that if they're smart enough to break into the account in the first place, they're smart enough not to allow that email addy to come back to them. They probably set up a brand new @yahoo account for every successful theft.
It's happened to me twice, and it's extremely frustrating. But it's really best to chalk it up to a learning experience and make your identity more secure.