That is what it sounds like. The hacker got into your email and changed the password and gave a different email address as the one to be used for verification.
yahoo sign in window says my “password has been changed in the past 3 months” which I haven’t.
Windows 10 popup says that all the time ,LOL