The same thing happened to me! Around the same time.

If you are already using 2FA, there isn't much else you can do.

This morning at 5:30am, I was emailed a code to access my Microsoft Account. I wasn't awake so it wasn't me. Went to logon with my password and couldn't because of too many attempts. So I logged in using a code sent to a different email I have. Then I changed my password. Anything else I can do?