Transferring Ownership

I am a member of an organization that has a paid Zoom account and am the Zoom tech at meetings. Last month, someone (not authorized!) contacted Zoom to have the ownership transferred to another email address. So, the president of this org does not check email every day, so the warning emails from Zoom were not read and responded to, which resulted in the ownership being transferred. When she finally checked email, the account had been transferred. She emailed me and I logged into our account and changed the owner email back. So how did someone accomplish this transfer? Did that person have to have our login password? If I change our account password, will that be enough?