A few days ago I received a Twitter code because of my 2FA, which made me change my password there.
The next day, I received emails that someone tried to log into my Microsoft account, Reddit, and a few other accounts, so I started changing the passwords to all accounts associated with that email. About 20 minutes later I got a notification saying someone tried to access my iCloud account connected to my iPhone, and the location said someone was trying to get access from Bejing, China.
Then, today, I woke up to an email asking me to confirm my email address from Airbnb, but I have never created an account there. So I reset the password to try and log in, and got into the account to see that it was previously accessed twice from two different locations in China – Beijing, and Zhuhai here is a [screenshot](https://imgur.com/a/cVWFwT4). I also contacted Airbnb to help me resolve the situation but I haven’t received a response as of yet.
I also got another login attempt for suspicious activity from an old game I used to play, with an IP address located in the middle of a lake in Kansas.
I don’t know how someone got my email address, there is only one occasion of it possibly showing up in a breach according to Have I Been Pwned, but that was 3 years ago, with the MyFitnessPal breach.
I created a LastPass account today and I’m in the process of setting everything up there, but I wanted to know if there was anything else I can do so this doesn’t happen in the future. Or if I can find out who’s trying to do this, so I can file a police report, because this has been happening for about a week now