I am suspecting the hacker got access to my Firefox sync account as well which would enable him to get passwords of different accounts.
Wait, you stored your passwords in the cloud?

Why on earth would you do that? Cloud storage is a terrible idea for passwords.
I'm a complete idiot when it comes to tech, and even I know not to do that. I'm not trying to rub salt in any wounds here, legendster, but damn. I use Firefox, but don't use the sync function.
And I'm not even sure why e-mail is
required on this forum. I get that some people want the 2FA security, but for me it's just another piece of data that can be hacked, and personally I don't care to enter anything but a throwaway e-mail address.
He reset the password today. The bigger question is - like LoyceV mentioned - how did the "hacker" access the account without resetting the password, and why did the presumably real legendster needed to reset it if...
Why didn't the hacker reset the password is the better question. And if legendster did indeed get hacked and the hacker didn't change it, I understand why legendster would change it--unless I'm missing something obvious. I'm assuming the hacker got access to it from the Firefox data in which it was stored and presumably still has it. No idea why a hacker wouldn't change a password on an account they just hacked, but hey....I'm not a hacker.