u/Arbordaymoon

I received two emails and a text message from Microsoft stating my account had unusual sign in activity and someone else might have accessed my account. I didn’t click any links in the emails and opened a new window to log into Microsoft. It said the same thing basically so I verified my identity, changed my password and set up a passkey. I did verify that a login from the Philippines was not me. I don’t really use my Microsoft account for much other than my resume. I do have some photos on onedrive but not many. I haven’t seen any signs of any changes to my account so I’m thinking Microsoft might have asked them to verify their identity through a text msg or email code which they couldn’t provide so hopefully they weren’t able to actually access anything. Would hackers use information right away? What are the dangers with that going forward and is there anything I need to be looking for in the future to ensure safety?