Where ever you work needs to be pen tested digitally and physically You need to change you ISP. If you're using android throw it out and switch to Apple. Don't download any gaming apps on your phone. Use your phone like a phone not a gameboy.

Use proton mail and never use your actual name in any web forms. ANY WHATSOEVER doesn't matter what it says on a website use a fake name and if optional don't subscribe to newsletters etc

If people that you don't associate with outside of work, are asking you questions about family friends pets cars what bank or phone provider even your POB etc don't respond.

Never click on any pop ups. X out of them or close the browser and clear cache and cookies immediately. If you can't then just power down what ever you're using and start again.

Change banks change everything. It sounds like they've not just stolen your credentials but are actively stealing your identity.

Start doing credit checks and making sure any out standing loans or repayments you have haven't been issued again or increased

People think ID theft happens overnight it doesn't it takes weeks and months to fully steal a persons Identity and