Someone has been accessing my binance & email account

I was getting emails that my binance account has been accessed today, so I checked my email - nothing.

But then I tried to log in to my binance, my password was reset.

Turns out, someone got hold of my email and had put up a rule where it forwards to someone and auto deleted them (and some how has been deleting them from my deleted folder quickly as well.)

They were keep resetting my password for a while, but I managed to change my password for my email and binance and delete the auto delete rule, and delete their change of verification method for my email account. If I checked in 1 day later, they would have gotten away with it. (I made a mistake of not taking note what the email address it was forwarding to unfortunately)

I checked binance log in details and seems like there were log ins from Latvia (I don't live anywhere close) multiple times today, and seems like they were trying to verify their ID onto my account.

I'm not sure what to do with this information or whether or not I am safe for now, or how I gotten in to this mess.

I guess tl;dr is: I was wondering if there is anything I should do and what to learn from this experience form someone who is more experienced and precautions than I am.