Urgent: Potential Hacking Incident – Seeking Advice

I recently encountered a concerning situation that has left me feeling uneasy and in need of guidance. An email landed in my inbox containing a password that I’ve frequently used over the years—one that happens to be my current PC password. What’s more alarming is that the email was sent by someone with a Spanish name. This incident coincides with the unusual activity I noticed on my Spotify account, where it seemed someone else had access and was interrupting my music.

Last week, I realized I was not the sole user of my Spotify. I would hear random stops in my music, prompting me to investigate. To safeguard my account, I quickly logged out of all devices that were connected to my Spotify account. However, things escalated last night when I received an email from Spotify, written in Spanish, that read:

“We have received a request to download data. To authorize the request, we need to verify this email address. If you want to continue with the application, click CONFIRM. If you did not make this request, please follow these steps to protect your account.”

Without hesitation, I clicked the link labeled ‘these steps,’ which redirected me to Spotify’s official secure site. I took the necessary precautions by changing my Spotify password, along with those for my Google account, Facebook, banking, and other platforms for good measure.

Although I’ve checked my social media accounts and Gmail for any suspicious sign-ins and found none, the stress of this situation has been overwhelming. In a moment of panic, I even replied to the sender of the email, asking who they were and what they wanted.

I’m now left with the nagging thought of how many other accounts I may have linked to that same password. I know it’s not wise to reuse passwords, but I figured I had nothing of significant value to hide, which turned out to be a misguided assumption.

Given this predicament, I’m contemplating whether I should report this incident to the police or take any further action. For context, I’m currently located in Australia, navigating this unsettling issue alone.

I would greatly appreciate any advice or insights from anyone who has experienced something similar. Your help could potentially ease my concerns and guide me toward the best course of action. Thank you!