Hi, I have been hacked.

So yeah, it happened. Early monday morning I was playing about 1am-ish I logged off, logged back in at around 3am to find my characters nude and all of my banks empty. They even vendored my bags, less than two hours and they basically erased everything I spent so much time to get /sadface. So I started following the steps in blizzard support but I do have a couple questions(however noobish they may seem) So here goes...
I sent an email out to the support people but was wondering, should I open an in game ticket as well if that's possible?
I've noticed on here that people are saying about an 8-10 day wait for restoration, so does that mean I'll get all of my stuff back like nothing happened?
Should I change my account email now or wait til its restored? and should I buy an authenicator now or wait til its restored? (and believe me I am kicking myself in the bum for not spending that seven bucks or whatever it is months ago)
Also, should I refrain from playing until I get all of my stuff restored or can I poke around in game still?

So anyways, think that's it. I'm just here lost and confused, just like probably a ton of other people that didn't think it could happen to them. Any advice would be completely welcome. I downloaded a few of the scan tools listed and found a bunch of stuff my regular sweeper never caught, changed my password, updated all of my stuff and updated that adobe flash thing I read about. Any other ideas?
Much thanks in advance.