What repeated unexpected password-reset messages can mean and what to check.
Short answer
Do not use links in unexpected reset emails. Open the service directly, review account security, and change the password if there is evidence of attempted or successful access.
Repeated reset emails do not automatically mean that someone has accessed the account.
Do not click links in unexpected messages. Open the service directly through its normal app or website.
Review recent security activity and active sessions.
If there is unfamiliar access or you reused the password elsewhere, change it and enable multi-factor authentication.
Check it now
The essentials for keeping your most important accounts locked down.
Open the checkSomething already happened?
If you entered your password on a suspicious website, treat that password as compromised. Go directly to the real service, change it, turn on MFA, and check recent account activity.
If you see activity you don't recognise, secure the affected account directly, change the password, enable MFA, review recent activity and linked devices, and contact the provider if necessary.
Keep exploring