Is multi-factor authentication turned on for email and your other key accounts?