You simply handed someone your account details and complete access to change anything they want. It is totally possible with that information they can change the Trusted Phone number so verification now goes to them, change the password and even completely change your Apple ID email to one of theirs. They can also go into Find My and remove your devices or remotely erase them. It is a stretch to say your iCloud got stolen, you actually just gave it to them.
Unless you know this person and trust them, it is probably the case that the account is no longer yours and there is nothing you can do about it. Removing the Activation Lock that could be placed on your device now may be possible as long as they don't mark your device as lost.
Contact Apple immediately to see how much damage has been done and how to proceed.
Contact Apple for support and service - Apple Support