Don't panic.
Lesson learned. This will cost you some time but likely no money at all.
First, do NOT freeze your credit reports without knowing all the potential unintended consequences. Not saying I've never suggested a freeze to my clients/customers .... just that there's a bit to know before you take that jump.
1. Notify Amazon. Close the account and get a new one with them.
2. Change ALL your passwords for every financial account you may access on line.
3. Be smart about the passwords; random numbers, don't use same password twice, include symbols and capital letters as well as lower case, etc.
4. You can get a FREE copy of your credit reports here: https://www.annualcreditreport.com/index.action IF you think it's necessary. There is nothing to buy on this site.
5. Report your fraud to the Federal Trade Commission at: https://reportfraud.ftc.gov/#/?pid=B
6. Report your fraud to the Social Security Administration at: https://www.ssa.gov/antifraudfacts/
7. Report your fraud to the Attorney General in your state.
8. Complete a police report with your local police or sheriffs department. Do not expect them to fix this for you but, some creditors may require you to provide them with a copy of your police report if someone does charge something on your account.
9. Put a Fraud Alert on one of your credit reports (Trans Union, Equifax and Experian are the big 3 credit reporting agencies). I believe the fraud alert stays on your credit report for a year and if you do this with ONE agency, they automatically share it with the other two. The Fraud Alert is simply a note attached to your credit report that states something of the effect of: "I am a fraud or ID theft victim. do NOT extend credit in my name unless first verifying the transaction by calling me or emailing me at: ____________."
10. Notify all your current creditors (credit/debit cards, bank, credit union, mortgage holder, etc.) that you're a potential fraud victim. They will decide to either flag your account for close monitoring internally or maybe even issue you a new account number.
11. FYI about the OR Attorney General web site ~ https://www.doj.state.or.us/consumer-protection/id-theft-data-breaches/identity-theft/
Let me know if you have any questions.