My university email suddenly forwarded all messages to an unknown address—what's going on?

I just found out that my university email account has been forwarding all incoming messages to some random email I don’t recognize. I never set up any forwarding rules myself, and I only access my email through the official web portal. I changed my password right away, but I’m worried if that’s enough or if the attacker still has some kind of access. I checked the account’s security settings and didn’t see any unfamiliar devices logged in, but the forwarding rule is still active and I can’t delete it. I tried contacting the university’s IT helpdesk, but they said they’ll look into it tomorrow. Meanwhile, I’m concerned about sensitive info leaking out, especially with deadlines and personal stuff coming up. Has anyone dealt with unauthorized email forwarding like this? How did you manage to remove the forwarding rule or secure your account? Also, is it possible the attacker can still intercept my emails even after I changed the password?