I woke this morning to an Apple login notification this morning from NYC (and I live far away from there). I’m now changing passwords, email accounts and all of that fun stuff this morning. I’m trying to figure out if iCloud was breached, or my mailbox.org email account is shit and I need to delete it. I haven’t had a problem like this in years! I’m so very careful.
What exactly was the notification you received? You can generate iCloud MFA messages without knowing the password. Attackers commonly do this and then call you spoofing an Apple Support phone number to try and gain access under the guise of helping protect your account. All the communications appear legitimate since the MFA message is and the phone number is spoofed to a real Apple Support number, but it might actually be that no one ever got access to anything.
I still recommend rotating credentials, etc. to be safe.
oh ok, someone on another thread sorta kinda marked you as a bot. So, I was dismissive of your comment (and purposely did not reply to you). My apologies.