You should also change your email account password, and enable twofactor authentication where possible.

You should change your account password.

I was told that without the account password, there was nothing it could do.

Telecom advised customers to delete any suspicious emails and to change their account password.

You should never send credit card information, account passwords or extensive personal details - name, address, date of birth or national insurance number - in an email.