@cptretroblue It's possible. I've checked your e-mail on haveibeenpwned.com and it was among 3 separate breaches. If you re-used an old password for your Mastodon account and didn't have 2FA enabled, someone could have easily logged in as you