When you sign up to these sites if they have a data leak scammers can get the email address you used they can then send you a link ( they call this phishing) so if you have had an email and tapped the link they can then get access if you used said link with you’re log on details it’s very common and effective unfortunately.
My advice never sign in from a link always go direct to the website to sign in etc