My acct was temporarily locked

My account is not getting locked, but my mailbox is been spammed with two-factor singin codes mails, so it seems someone got my password (which i now changed) and try to login to my account.
The IP’s in these mails are always different and from all over the world.

The email used for my epic account cannot be found back on sites like powned, so wondering where they got the login (i have unique password for every site …)