This warning was posted late Monday April 24 by an infosec person I follow elsewhere. I'm taking their advice, and if you have an Amazon account, I think you should too.
*******
Go to your Amazon account, sign out of all your devices, everything, everywhere all your Echos (yes I know it's a pain), reset your password, delete 2FA and any tokens and reset them. Now.
That doesn't include Fido / Yubikeys but does include Auth tokens.
Do it now.
@phool4xc I’m sure this is good practice in any case, but can you point me to some sources for further reading?