I received an email two years ago notifying me that someone had logged into my Apple account using iMessage. Since I no longer use this old account, I changed my password and moved on. Recently, while cleaning up my accounts, I noticed that a laptop that had accessed my account was still linked to it, so I removed it. I also discovered that, just hours before I got that email, someone had created an iCloud email linked to my account. My concern is whether simply changing my password back then was sufficient protection, especially since the device remained connected to my account for so long. Did they have access to my information all this time?
Additionally, I noticed that the person who accessed my account created an iCloud email as an alias to my primary email. I want reassurance that this alias isn't linked to my primary email; in other words, that my emails haven't been going to this new iCloud alias alongside my email. If someone sends an email to my Gmail or Outlook account, it shouldn't also go to the alias email, right?
2 Answers
If you've changed your password, that should have locked them out of your account, even if they still had that device connected. Just to be safe, it’s always a good idea to check your email settings too, like making sure there’s no forwarding set up.
Yes, once you reset your password, they weren't able to access your account anymore, even if that MacBook was still on the list. It sounds like you handled it well. As for the alias, it's a separate email. Unless you set up forwarding, no emails sent to your primary Gmail or Outlook would also go to that iCloud alias.

Related Questions
How to Build a Custom GPT Journalist That Posts Directly to WordPress
Cloudflare Origin SSL Certificate Setup Guide
How To Effectively Monetize A Site With Ads