[zemnmez]

I would look at your email forwarding filters. It's common to see compromises with this pattern where the email for your account was compromised and all the email is being forwarded to an attacker.

[waschl]

This! Have seen this personally in multiple friend’s mail accounts. This way it is “surviving” password changes, 2FA changes etc