This explains why my outlook/hotmail account had a 2fa prompt from a country I've never been in a few days ago.

Checked my password on https://haveibeenpwned.com/Passwords :-

  This password has been seen 1 times before in data breaches!