[irwjager (Ivo)]

It's possible the unwelcome guest simply got a username/email + password combo from the many data breaches out there.


You can check whether you were victim of such a (known) breach and what was leaked here;
https://haveibeenpwned.com/