he can't get ur login info, just ur key, just use an antivirus analizing ur pc for probably Trojan files, and change ur HB pass, and just kick him a lot and report a intrusor using ur key, dunno if they will change ur key it not probable but keep trying :d