Have I Been Pwned? to get automatic notifications if your email address is found in a fresh account breach. If you haven’t changed your Apple ID’s password in a while and you’ve ever re-used the password with another site, this could be either the result of an old password breach elsewhere or one that just occurred.
Apple’s two-factor authentication offers an extra signal about each login from a not-yet-approved location.
