I have had the same thing happen to me. My primary email address was hacked and Google wouldn't do anything about it. This was the address I used for absolutely everything - including my PayPal! Fortunately I didn't end up losing all that much in the end, except for a rather nice email address (my full name @gmail.com) and my Wordpress/Gravatar account.