Signed in to pay bill and said had to change my password. Thought it was odd but now I know why. I didn’t receive any notification of hacking.
I didn’t either and they pushed the two step sign in. It is a pain in the ass but I suppose it may be necessary.