Hi,
I just got a 2FA pop up on my phone, informing me of a log-in attempt from Bangladesh. Since I was not logging into any Microsoft service, and am located in Western Europe, I refused. I immediately changed my password
Checking the Microsoft Account Security page of my account shows several login attempts made today and in previous days, all from various locations.
I understand this might be due to my information being part of a data breach. I use different passwords for all accounts, so I should be safe in that regard.
However, since my 2FA prompted on my phone, does this indicate that there was a successful login attempt, using the correct email and password combination? That would be incredibly strange, as I coincidentally changed my Microsoft password last week to a different password because I also got a 2FA prompt from a suspicious country last week.
Should I be worried?