Holy moly!!!
Were you using LastPass around 2017? One theory that's floating is that we were all owned by a compromised LastPass extension 4-5 years ago.
Just trying to find some common thread among all of us (a thread that's different than "lastpass was owned" which presumably should be more improbable...)