Email leaked?

Today I woke up and saw all of my emails had the "suspicious login attempt" from google, I changed each of my passwords and went to sleep, only to wake up and find out someone tried logging in again and apparently they knew the new passwords even though they were totally different, I've enabled 2fa and got an authenticator app, is there a chance they'd be able to get into my email? And I wonder how they seemed to know …

2fa email emails find google leaked logging logging in login passwords privacy sleep today