Thank you, but it has now been disabled.
Was a pretty fraught afternoon/evening/night realising what had happened, the implications of hackers gaining control of someone's online identity and then the lack of any meaningful support or security out of "normal hours".
TBH I was pretty disappointed and then outraged with Virgin's lack of support systems to respond to this kind of issue. Being told to call back in the morning just added to the stress and anxiety.
Thankfully the bereavement team jumped on it the next day and worked with the IT team to suspend the account.
Not a good experience.