Here is what you need to do to prevent such events in the future:

- Use password manager with the master password at least 16 characters long (it makes brute forcing activity economically unreasonable)

- Change passwords on all your accounts and setup 2FA

- If you use cloud providers for enterprises, always setup limits and notifications, also you have to purchase paid support (it costs around 100 to 500 per month) to talk with human when something happens

- Can't afford the paid support? Probably you should reconsider the need for enterprise cloud provider and something like linode/DO will be good enough for your goals

- Consider paying for your email and setting up a custom domain to control your identity

Good luck with your case.