While an individual account can be hacked, or the site of a service can be hacked, recent news reports have been full of reports of add-on aps for phones that contain malware capable of snatching passwords and other information directly from the phones. There have been reports of anti-malware aps(?) and scanners to remove bad aps, but since I still use a tin can and a long binder twine for most of my communications, I haven't paid enough attention to make any suggestions, other than that you check out the phone and anything on it, as well as your own computer(s) and other "possible points of entry" while cleaning things up.

If one of your accounts is accessed, the recommendation usually is that you should change all of your passwords at any places where you use one. It's unlikely that you'll be able to find how someone got into your stuff, so all the "possibilities" may need some attention. Most of it is stuff we're all supposed to be doing routinely anyway, but I doubt that there are many of us who don't have at least a few passwords that haven't been changed in years - and even some to places where we have "sensitive information."

John