There is no immediate danger, as the thief cannot log in without a password and cannot change anything accordingly. An e-mail for a password reset is also sent only after successful identification. Money withdrawals via app are not possible. We recommend that you contact your mobile phone provider to block your mobile number and avoid any costs.