So, I have a google account (not a primary personal or work one) that didn't have 2FA and had a 14 character random password that would have been generated from my LastPass days, anyway, 30mins ago, I just got a Googel notification of suspicious activity on my account and they locked it down, reset my gmail settings that had been changed and I have just been through the recovery process and added 2FA. I can really only think that the two places the password exists are LastPass and now (for the past probably 3 years) BitWarden...Or I'm being paranoid...just wanted to hear if others have had Google incidents?