Damn if that’s the case, my paranoia is gonna go overdrive.

You can check on haveibeenpwned.com

Btw, has anyone here actually got hacked? I feel like the media always overexaggerates “hacking” and its mostly people just using weak passwords (user error), not really hacking.

It’s more likely to be that they found out your login credentials, yes.

They might find a site with crappy security where they can try many usernames and passwords without getting blocked or they might actually hack the site and get the password list.

Having a strong password, not reusing passwords and enabling MFA goes a long way towards protecting against those scenarios.