Recently got hacked on almost all of my accounts
Hi, as the title suggests, my accounts are all getting hacked. Google, Microsoft, Apple, my alt Google email, Roblox, Etsy (for some reason??), Teams (School email), Spotify, and Instagram as of now, not in consecutive order, as I've been deleting my emails just in case.
My Instagram account was the first account that I noticed had gotten hacked, and the person on it was posting weird Elon Musk cryptoscam crap, but I logged them out and turned on 2FA (I didn't have it on before, since I'm an incredibly uncareful person, as you can probably already tell). When my Spotify was hacked, it kept connecting to multiple different phones, ones that I knew weren't mine, and played random AI songs on loop until I logged them out as well. And for my Microsoft account, I got several emails reporting unusual activity within the span of a few minutes, but from completely different countries, from Portugal to America. A similar pattern went on for the rest of my accounts until I finally got around to changing my password. But my Microsoft account was hacked most recently, the same day I logged onto my Xbox account after a while to play Minecraft on my phone. I sent a verification code to my email to log in, and a few hours later, I saw a bunch of login attempts on my Microsoft account from random countries. Could this be a coincidence? I own Apple devices, and I know they're known for not getting hacked, but it seems suspicious. Or I'm just being paranoid
I used my old laptop for this, and made every password for each account different and much wordier, and wrote them down on paper since I didn't trust password manager anymore. I finally turned on 2FA on my accounts as well, and removed my payment info from everything. I've only signed back into two accounts on my normal laptop, ones with no sensitive info on them, and have deleted everything from password manager.
I first thought I had gotten a virus from recently downloading a game online for my Switch emulator, but I've done malware scans and security breach scans, which have reported nothing. I believe they might got into my Google account first, as all the accounts that have been hacked had the passwords saved on a password manager. I believe I might have gotten password guessed, since I had an incredibly easy password for my Google account as well, which was potentially worse than "Password123." I was wondering if anyone knew what else could be happening to cause this, and if there's anything else I should do to properly secure my accounts? I'm sorry for this being so wordy and for any spelling errors I might have made, or if I wasn't supposed to post this here, I'm just really panicked right now. Thank you.