A member of staff should be along shortly to review this and give you additional information, however, I can tell you now that you are responsible for the security of your own account and website and if your friend did, indeed, violate the terms of service, you are still responsible. But for now...