I have several email accounts that have been compromised.
Also, check accounts like LinkedIn, Facebook, etc.
I have been changing passwords all morning.
I change passwords and I put a signature ID on subject lines. Anyone receiving an email purportedly from me that does not have that signature knows not to open it.