Father's account being used to send scam emails asking for gift cards

My elderly Father's email is being used to send emails to his contacts which are obviously not from him. I immediately thought that they must have hacked his email account but the account password has not been changed. Should I worry or is this just spoofing?