SO when I changed my Google password I saw that it was logged in to oneplus.com, a Chinese "retail" site. I had never heard of it so I added a site blocker to google and it go bye bye. Not sure if that was the source of my issues but it's gone now.
"A cybercriminal group that calls itself USDoD uploaded a large database titled “National Public Data” to a dark web forum.
The database, which the group has offered for sale at $3.5 million, is said to contain the personal data of nearly 3 billion people living in the United States, United Kingdom and Canada, according to a federal lawsuit filed in Fort Lauderdale on Aug. 1."
Sensitive personal data belonging to every American including their Social Security number, address, date of birth and phone number was stolen online by hackers.
nypost.com
I'd say at a minimum if you have .gov or .mil accounts to make sure MFA is enabled.