Someone is using Trezor Wallet with my email and I just found out

Recently I've seen an confirmation email of a guy from Russia trying to get on my "Trezor account", I didn't mind that much at the time since I didn't confirm it as I couldn't understand what it was all about with a hardware qallet and whatnot.

Today, a Chinese IP tried to send BTC from "my" Trezor wallet, I've taken a look at the website and seen its a hardware wallet and you basically have to have the delivery in order to access it or so I've understood.

Is there any way to lock the account? I don't know how and why they used my email but I was not aware about all this, can I do anything about it or is it just a case of they have the complete rights of the account since they have the hardware wallet and my email is just tied to it?

Right now there is a 72h delay on the transaction, waiting to see if anyone has any idea, sorry about posting here I didn't know where to post this