We get this a lot in Threads, saying that they never give out email addresses to anyone.
But we all know that if you sign up to anywhere on the Net, email friends, sign up to Media Apps, etc etc = your email address is out in Internet land. There are other ways of getting email address but I won't go into that. Just believe me, if someone wants an email, there are ways of getting them.
Only the Password is needed and that can be done with some clever software from the Net.
Regardless of whom is at fault, your Account has been compromised.
You need to Telephone Sony Support for your Region and answer a few security questions to prove ownership of the Account and then let them to their magic and get the Account back to you.
You might want to take up their added security of 2 Step Verification, they send a code to your Handy Phone (Mobile/Cell) and you use that to add a better level of security.
