I would add, keep an eye on your settings as well. I got burned once on an old email account that I didn't use because my backup email was set to a retired Hotmail account. Problem was, the old Yahoo account in question was my backup account for other accounts. Things would have been a lot worse without 2FA on all of my important accounts. The guy would have been able to follow that trail upstream all the way to the bank. Make sure those backup email addresses are monitored and keep an eye on the logs.