I don't think it was hacked. It sounds like a phishing/scam/fake deal. Apple will never ask you to pay money to unblock your device.
Did your son receive an email or iMessage? How was the message that said it was blocked delivered?
Definitely change your password and enable two factor authentication if possible.
Ignore those emails, don't click links and definitely don't call them.