Move any super rare items to a different account until you regain access to your email or can setup a new email for the account. They likely have control of it and could get your pin via there to take the rest.
Not sure how neopets jr accts work, but if you don't need an email or it's not visible to change then you should be safe as long as pin and pw have been changed.
PM me items taken. I can try and reimburse the poor little fella, I remember when I was a kid and got hacked