Earlier today, I received an automated text from Google stating..
Google blocked someone with the password for (email address) from signing in to the account. Learn more: google.com/signins
I immediately changed my password. I checked where in the world the sign in came from, and it said Luang Prabang in Laos. I'm in the UK.
I only use this account so that I can subscribe to a number of users on Youtube, so I really can’t see why it’d be a target. I haven't had to type the password into this account recently (we’re talking months) as my phone remembers the password and stays logged in. I haven’t used this password on any other accounts of mine and would consider myself to practice good cyber security.
Unlike Colonel Panic’s question (How did someone log-in to my Gmail account from Kenya?), this was actually somebody else signing into my account.
My question is, how has a complete stranger managed to get access to the password for my personal account?