1. I had made API in Coinbase Pro before just to practice. Then I deleted it all right after that. Coinbase confirmed that I do not have any API active.
2. I have 2FA for Coinbase login, it is Google Authenticator.
3. I used Lastpass generated password for the Coinbase password. Needless to say, I do not use the same password anywhere else.
Thank you for all your help.