PCWorld/TechHive has a very clear article on how to deal with a Twitter hack.

Print it out and keep it handy, especially if you manage a corporate account. If you are very big get a phone number for Twitter security, make contact, and add it to your IR plans.