How could someone in Nigeria sign in to my U.S. Amazon Account?
I live in the United States. I received an email notice from Amazon (not a phone alert) which I didn’t read for several days that someone signed in (not attempt to sign in) to my account in Nigeria.
Amazon asked me to confirm if this was me. I followed the Amazon prompts, changing the 3-month old password. My previous and current passwords are a mix of 20+ digits with no recognizable words plus special characters and numbers, a unique password that I don’t use anywhere else.
I have been using SMS and email for 2FA. I changed the phone number for SMS but left the email the same.
The Amazon orders, browsing history, and shipping addresses are all mine. If someone in Nigeria did log into this account, they haven’t caused me any problems, yet. I appreciate any insights: how worried should I be? What other precautions should I take? How did the Nigeria person figure out my email/phone number/password?