My friend's account got hacked and he cant access it anymore.

Does anyone know how long steam support will take to reply? He clicked on a dodgy link and it signed him out and change the email address. He change the password but that doesn't seem to do anything. Please let me know if we can get the account back another way.