Long story short, I was a 'victim' of a data breach a while ago and some of my information, including my name and email address, were leaked. I only became aware of this after seeing suspicious activity on some of my accounts. I have of course since rectified this and my security is now massively improved. I have randomly generated, and never reused, passwords on everything. 2FA enabled whenever possible, and even third-party authentication on my most secure accounts. Even I can't access most of my accounts without first checking my safely stored list of impossible-to-memorise passwords, haha.
Yet even with all that effort, I am STILL getting security warnings and login attempts on my Facebook account specifically. How is this possible? I'm only a layman in this space but maybe I'm missing something.
Just today I received an OTP request in my emails from Facebook, or at least what appeared to be (the address was legit but I know they can be spoofed). I didn't click any links of course, and instead logged into Facebook separately and lo and behold there was a genuine login attempt from a random Android phone and a warning to change my password.
I suppose my main question is: do I have to worry about these attempts with all the security measures I have? I'm starting to wonder what the point of it all is if I'm still being bombarded with warnings and calls to change my password from Facebook on a regular basis.
I attached a couple of images too: the first is the OTP request email which I didn't ask for, the second is one I did (actually from Facebook, but notice the different fonts between the two), and the third is the device that tried to access my account today.
Sorry for the wall of text, I'm just tired of dealing with scammers. Appreciate ya.