Hacker Registered as Administrator

I got an email that a “new user” is registered for my website. In fact, a new register did show up and as an administrator too! I have a strong password. It appears nothing was changed but how do I prevent this again and is there someone I can report it too. I did change my password. Thank you.