I received an unusual email from "noreply@email.apple.com" on 9/24 stating that my iCloud account had been used to sign in to a MacBook Pro 13" on the West Coast named "macen" - I did not click on the link in the email ( ) but navigated there to change my password from safari on my phone. I also discovered that I had about 50 texts to various numbers in China.
noreply@email.apple.com is not a legitimate address for Apple, so most excellent that you went directly to your Apple ID from a browser to change your password. There are several Apple "no relpy" email addresses. Among the are:
Apple Id.apple.cơm