Glad it all sorted out for you. It appears more and more common. I like to think I am careful but seem not as much as I could be. Make sure you get compensation from the phone company.
I change password regularly. But I will check out how LastPass works, thanks for the tip. I am reluctant to use google authentication, I just don't trust google or like to support them, as they are to powerful and have to much information; Am I wrong with this ethos ?