You should definitely change your password, and add 2 factor authentication to your account.
You should contact your credit card issuer and file a fraud notice.
It's also possible no one ordered anything using your Apple ID.
How did you find out that this happened? If you received an email saying so it was probably a scam to steal your identity. Did you click a link in such an email and enter any personal information? If so, you need to change or cancel any information you entered such as passwords and credit cards. See: Identifying fraudulent "phishing" email - Apple Support