Got what from everything I can tell a real email from uber with a verification code to login and I haven't logged in today. That means that, assuming it was real, someone got my password right.

Aaaand then I spent an hour resetting a bunch of passwords and deleting all passwords from Microsoft and Google (I use an external password manager now).

While digging through privacy and security stuff I did see that someone tries to unsuccessfully login to my Microsoft account every few hours from various countries around the world. I'm guessing that happens to a lot of people whose accounts are old and have been involved in breaches of services you sign up with them with.

Glad I have multifactor authentication setup for all the important stuff.