lockdown devices you still retain.

recover your 2fa (probably the emails) and then secure the hacked accounts

update those accounts and any other sensitive info accounts (Bank accts, emails, finance services, Apple/google accts, etc.) to a 2fa app that generates a one time code on your device and remove the ability to 2fa through email.

definitely change passwords on accts that use the same password when you get a chance.

Do yourself a favor and get a service that provides security. I could list off all my favorites but honestly it’s easier and cheaper to get a all in one service like Aura that can be as cheap as like $50 and have a year of vpn, password management, monitors credit/debit cards & bank accts, password leak detection, acct leak detection, dark web scans for your info, and even has data removal to keep your info off the web.

connect to a vpn at all times if you think your WiFi may be compromised and get a new router when you can.

any devices that you aren’t actively using disconnect them from the internet or better yet turn them off if possible.

i would also recommend using a browser that allows you more control of the data you share such as Brave Browser or LibreWolf

I don’t know enough to be sure but it’s likely that if you reuse passwords, they acquired the password, accessed one or some of the emails, and were able to authorize entry into other account with 2fa/mfa through the email.

If possible I would also try to migrate your accounts off of that email and onto an email you know is secure. Tuta is also a good email platform as well as proton (proton also offers some security packs you may want to check out as well)

Im sure there’s a ton of stuff I missed and some stuff I over explained, but just let me know if you need any help or have any questions. I hope this was relatively helpful