I had it linked to a gmail with 2 step verification, that e-mail wasn't touched. Changed the linked e-mail and passwords on everything, just incase. And yeah, I think Claire went through the logs to check.

I use a password manager so I can't remember how shit it was, but it was only 7 characters so safe to say not great.