[eksployted]

I also just had this happen as well and have the same setup. Unique password stored in keepass-x and I use the chrome extension. I have very few installed though, so hopefully not a malicious one there.

installed extensions: ublock origin, OneTab, Lastpass, metamask, cisco webex, edit this cookie

[gregsadetsky]

Thanks for the report. We're probably at 25 reports in this thread by now.

Could you please confirm which ip address the attacker tried to login from?

Also, how old was your account?

[eksployted]

My account was created in 2013 and changed the password last in 2016. I went back and looked in the audit log for the last year and there was nothing else suspect. Just some failed logins, but that's pretty common, I didn't see any logged in usage from any IPs but mine

[eksployted]

Sure, this is the email

Time Tuesday, December 28, 2021 at 6:20 AM EST Location GERMANY IP address 160.116.206.37

[gregsadetsky]

Thanks! Same 160.116 ip range as me and many others here.