Unauthorized Access of an Account

I believe someone has access to my web site User ID and password. What do I need to do?
Money has been withdrawn from my account without my permission. What should I do?