I would suggest patience to let things unwind.
I see on Reddit people who had their Paypal accounts charged are now getting refunds: https://www.reddit.com/r/Visible/comments/qawrkr/paypal_refund_pending_at_least_someone_is_doing/
It is easy for me to say this, as I have not been hacked yet. I would suggest checking back in a couple of days and see if anything has happened. And document what you have done so far.