Once you get this straightened out, get Lifelock. I’ve had them for about 8 years now and they have caught a number of things. Sometimes obscure things.
I got a notice from them one time that my email password was picked up on a hackers/dark website.
I immediately changed it to a stronger one and luckily nothing has happened that I can detect.
For about a bean a year to me its worth it.
Lifelock has caught some stuff for me too.
It’s worth it.