Phishing scam??

I am embarassed and upset to realize that after all these years, in the midst of a migraine I allowed my self to fall victim to a phishing scam. i am sure of it. I don't want a lecture but want to know what the implications are and what I can do. Here are the specifics: The e- mail appeared to come from Microsoft..same logos etc.. it referenced security codes and asked for verification of my account and basically what I did was change passwords. In doing so, i gave them my old password to my hotmail account................I have no financial dealings on my computer etc..not much to steal......other than other's e- mail addresses............Am I right? Is this a scam?   Thanks, C. (the embarassed)