If an account appears to have been hacked, focus first on regaining control and stopping further access.
If you can still sign in, change the password immediately and use a unique password that is not used anywhere else.
Sign out other sessions and remove devices, apps, or login methods that you do not recognise.
Check recovery email addresses, phone numbers, authentication methods, and other security settings for unauthorised changes.
Enable multi-factor authentication if the service supports it.
Review recent activity and look for messages, posts, purchases, password changes, or other actions you did not make.
If the same password was used on other accounts, secure those accounts too. If you cannot sign in, use the service's official recovery process.