I'm in a tough situation. Just a week ago, I received alerts from Steam about someone logging into my account. Despite having Steam Guard and two-step verification enabled, I didn't get any notifications and someone managed to get in. After changing my password and email, I thought I was safe, but then I received notifications from NordVPN saying my email was part of a data breach, along with a lot of my personal information. Today, I woke up to around 20 emails from Epic Games' two-step verification because someone successfully changed the email on my account. This account is connected to my PSN, and I can't unlink it without access. Epic's support is nonexistent unless I talk to their unhelpful AI. I also got a warning about a suspicious login on my backup email for that Epic account, which also has two-step and Google Authenticator. I'm lost—where did I go wrong and how can I prevent this from happening again?
1 Answer
Have you clicked any shady links or downloaded anything weird recently? Those can be major red flags for hacks.

Yeah, I've been sailing the internet a bit, but I scan all my downloads for malware regularly and use VPNs with threat detection. I also did a full Windows Defender scan and found nothing.