My email was hacked into, what do I do?

It’s a gmail account and someone accessed it when I was asleep through a mobile phone and spammed my contact list (and possibly others). Is it best to stop using this account or do I just need to reset the password/security options?

I’m kind of freaked out as I had a secure password.