Possible info stealer after two months

Hi, I just posted this on a different help sub, thought I post it here too:

Sorry if this ends up being a long post, I'm a bit anxious so I want to be as detailed as possible. I was attacked by a Lumma stealer at the end of may this year, it was caught by Windows defender pretty quickly but the next day I had my discord and Instagram hijacked (that stupid mr. beast scam). So I did what eveyone suggests: completely wipe the pc, reinstall Windows from a USB and reset every password to soemthing unique/revoke opened sessions I could think of from another device (also added MFA to everything that allowed it). After that, nothing else happened and I kept using my devices as usual, just being more careful with what I download of course.

However, almost two months later, I see some strange activity on one of my Outlook accounts. I got a "Secure link to log into Claude.ai" email that was quickly moved to the trash folder without my input. I immediately changed my email password but a few hours later I received more of those emails: YouGov sign in code, and a couple password reset emails. Some of these were marked as read and/or moved to the trash folder also. After that I actually made sure to use the "Sing out of all devices" for my email and changed the password once more. To be safe I did the same process with my other Outlook accounts. No weird activity since then.

The next day, I get an email that someone logged in to my Open AI account from a different country. I log in, revoke all sessions and add as password and MFA. No more incidents either. Also, during this timeframe I got some other emails about someone appartenly trying to get inside my Netflix and an old Spotify account but apparently they weren't able to.

My Open AI account is linked to my Google account, at the time of the very first attack I assumed that changing the Google account password would revoke Access to all linked accounts. Similarly, I don't remember having signed out of all devices in Outlook, only changed passwords (already had MFA set for these), so I assumed that would revoke sessions as well since Microsoft is Microsoft. A Google search told me that I was wrong to assume this and should've taken the steps I took now to truly revoke sessions.

So my question is... is that really the case? Am I looking at the same stolen tokens/cookies from two whole months ago or do I have a reason to be paranoid? Especially about the email thing... And if so, why did I get a security alert from Open AI if info stealers are known to bypass this? No other accounts have been compromised seemingly, and I haven't been bothered since taken the mentioned steps but I can't help feeling nervous, watching my emails be tampered with in real time was a scary. Any insight would be appreciated, thanks.