I just checked my logins on Facebook and someone had recently logged in from a device that I don't recognize. They had my password. So I changed my password. It's easy to check. You can see everywhere you are logged in like computer and smartphone and tablet. And you can see the history of logins to check and see if they were all you. Just click settings > Security and Login and look at "Where You're Logged In".
Checked my primary hotmail. Someone tried to login from Columbia.
Checked my secondary mail. Someone tried to log in from Russia and Vietnam.
There have been many worldwide hackers stealing passwords so it's expected.