Best thing to do is notify Jagex, the makers of Runescape.They can probably find out who h4xed it and ban him permanently, or if it was a paid subscription, take legal action.
The account that got h4xed will either be given back to you or deleted. I think they give your stats and items back, but I haven't played Runescape in forever.