I just had a weird experience that I am trying to figure out. I received a suspicious sign-in notification from google on my gmail account. They had my correct password. This isn’t that surprising, the password was old and probably breached and needed to be changed anyway.
The weird part is that the attempt came from my town, on a device listed as Windows NT. I don’t own any Windows devices. And this isn’t NYC or somewhere that could be a coincidence, this is a small city of about 100k people.
Unfortunately I didn’t think to save the IP or other information that came with the notification and now it is gone, and the “last 10 sign-ins” page is overwritten with new activity.
This seems to imply that somebody in my town has my email/password and tried to log in with it. But I just moved to this town and I don’t know anybody here! I don’t know how anybody could have that information.
Does anybody have any insight here? This is creeping me out.
