This warning was posted late Monday April 24 by an infosec person I follow elsewhere. I'm taking their advice, and if you have an Amazon account, I think you should too.
*******
Go to your Amazon account, sign out of all your devices, everything, everywhere all your Echos (yes I know it's a pain), reset your password, delete 2FA and any tokens and reset them. Now.

That doesn't include Fido / Yubikeys but does include Auth tokens.

Do it now.