Fake AT&T call led to Apple ID login attempt

First, I’m sorry for the long post but there’s a lot of backstory and I’m sharing all the details in hopes someone can help. Last Friday, I needed to call AT&T to ask a question about a phone upgrade. Instead of looking on the website, I quickly googled “AT&T customer service number” and clicked a sponsored link for www.att.com (which ended up being a fake website). I clicked on a link to speak to a live agent and ended up talking to someone posing as an AT&T agent. All I gave them over the phone was my name, phone number, and address (I cannot remember if I gave them my email, but I don’t think I did) before something felt off and I hung up. They tried calling back and I didn’t answer. After speaking to multiple people in my life who said I shouldn’t worry about it and that all I gave was public information anyway, I decided to move on. Important to the story: on Saturday I upgraded my iPhone in the AT&T store, so I was getting a lot of communication from AT&T like emails and texts. Last night, I started getting calls from a local number that kept leaving voicemails saying they were from AT&T and wanted to help with a recent order. I feel really stupid for not connecting the dots sooner, but I didn’t think much of it and never answered. This morning at 9:15 am, I got a notification saying that someone was trying to sign into my Apple account from New York. I clicked “do not allow” and tried to change my password. However, since my phone is so new, it’s not yet listed as a trusted device on my Apple account, so I wasn’t able to change my password right away. My boyfriend ended up changing it on my iPad when he got home since I was at work all day. Here is where it gets weird! I got an email at 4:14 pm from Apple saying my password was updated, which aligns with my boyfriend changing it at home. At 4:15, I got a call from that local number posing as AT&T, but I didn’t answer. When I clicked on my call history, I had a missed call and voicemail from the same number at 9:15 am — the same time someone tried to log in to my Apple ID. I’m not delusional and I know this has to do with the stupid number I called on Friday, but now I’m worried that my iPhone is compromised or something, because what are the chances I get a call the minute I changed my Apple password? Is there any explanation for how they would know I changed my password? What steps can I take to ensure someone is not lurking on my phone or has current access to my account? Thank you in advance!