Yeah, digital games are tied to your Xbox Live/Microsoft account. You should be able to see them here:
https://account.xbox.com/MyGames
Or your purchase history here (this might only be for Xbox 360):
https://live.xbox.com/download/history
If you get a new console, you'll want to set it as your new "home" Xbox One. It mainly simplifies licences, and allows other local users to be able to use digital games you own, and share XBL Gold benefits.
https://support.xbox.com/games/game-setup/my-home-xbox
Even if you have
a passkey to access your account, you should probably still change your XBL/Microsoft account password. If you used the Xbox's web browser at all, might be good to change passwords to any accounts you might've logged in to with that.
If you used media apps like Netflix, same sorta thing. I know Netflix has a "sign out of all devices" option on its website. I don't know if or how logins are shared between local users on an Xbox One. Don't know how vulnerable any such accounts might be.
If you haven't already, it might be a good idea to contact Xbox support to let them know what happened. They might have a better idea about what to do.