First I want to regain access to my accounts, or at least make sure this person is finished what he/she's doing.  That's first.  Second, I'll be pursuing legal action.  I'll save the details right now, but I'll keep everyone in the loop.  Maybe.  I would even consider possibly 
not pursuing legal action if this person came forward - IF (of course) it's someone online.  If it's someone in real life, I'll probably think of something other than "legal" action.
As far as my passwords, it's probably not a good idea to divulge. 
Thanks for the reply.