Got an email from birdsite that an iPhone in Indonesia had accessed my account, so I revoked its access and changed my password to a cryptographically secure random string.

I feel cyber af right now.