It's not just your passwords you should consider...
Hardy admitted to successfully impersonating me to O2 and changing my
mobile phone number back in 2010. He was able to do that by knowing
enough of my personal info - mothers maiden name, place of birth, date
of birth etc.
Make sure your password reset options are secure. Remember that even
though it suggests mothers maiden name the answer could be anything
you like.
If you have a smartphone you can download the google authenticate app
for gmail accounts. And you can also setup security on Facebook etc.
to text verification codes if you log in from an unrecognised machine
or device.
All these hackings etc should be reported to the police and anyone who
has been the victim of any attacks etc by the sociopath should
exchange crime ref numbers and advise the police it's not a localised
case.
That way it will be taken far more seriously.