You could try adding 2 step auth to prevent this from happening in the future. When you change the password, do you change it back to your previous password after a service? If you believe that you weren't phished, keylogged, etc maybe you have used the email:pass on something else that may have been leaked and they got you that way.