Is it possible that keyloggers and malwares wouldn't be detected by anti-virus scanners? o.o Maybe you have used the same passwords in different websites. Also, one of the most important thing that is invented in logging in forms are 2FA. Why haven't you set that up?