The danger is not the slip but the silence. The first 15 minutes: tell IT, change the password, sign out everywhere and keep the email for IT.