Jim is getting a ton of emails, that his accounts are being reset. He's worried. Leo says that if your password has been changed, that could be a bad sign you've been hacked. So go into all your accounts and change the passwords again. Set up 2 Factor Authentication for your phone. This will prevent someone else from doing that. Stop using related passwords. Use passwords that are random and distinct for every site. The only way to handle that is with a password manager like Last Pass. You can also set up an authenticator, like Google Authenticator or Authy.
Also check out HaveIBeenPwned to see how widespread your compromise has become.