If you had a shitty password - yes they could try. With a strong password, it'd likely take them more time to brute force it than it would take you to use a backup to alter the keys, rendering what they stole invalid (once they get it cracked).