richms:
And was your amazon password before this a unique one that was used nowhere else? Is the email address on amazon unique to amazon or something used on other sites that have suffered breaches. Have you checked on haveibeenpwned.com for your email address in any breaches?
Honestly, it's been years since I logged onto Amazon until the weekend, so I wouldn't have a clue what my PW was there. It's very likely it was something I was/am using elsewhere, but the one I changed it to this morning is something I have never used anywhere.
Checking that website it looks like I've been pwned twice, one from Canva in May 2019, and Slickwraps in Feb 2020 (Google tells me it's a custom skins/wraps for phones etc). I don't remember using slickwraps at all, but yes have used Canva.
I think my best bet, is once my current Amazon order goes through (Still 3-4 weeks away from shipping). I'm going to remove all my card details from it, and just open a brand new account using a brand new email, probably the best bet?