ku4hx has provided a Prudent way to proceed, changing all your passwords. I second those suggestions.
You may not be in as much trouble as you fear.
Passwords and credit card numbers for Auto-Fill are stored in the Keychains file inside your /Users/your_userid folder. This file is ALWAYS encrypted, and requires your login password to be opened. Otherwise, it is total gibberish.
Your login password is never stored on your computer, in any form. Instead, as you type it in, it is encrypted on the fly. Once you say the characters of the password have all been entered, the encrypted result is compared to the encrypted password stored in your user Account. All your Mac ever knows is ¿was that it? It does not even know the password length.
And if your 'in the clear' login password is not stored on your computer, it can't be stored on any backups.
If you password was '123' or 'system', or any other single dictionary word, the thief might be able to get lucky and guess what is. To brute-force crack a strong password should take a decade or more of supercomputer time.