It's an account that is known for phishing and was investigated by Hivewatchers but at this time its unknown what methods it used. Typically its through either keys inserted into various malicious sites and more commonly these days its through cloud storage accounts or social media accounts with compromised keys. Think back to whether you stored these keys in anything that backs up to the cloud or in something like email or a DM on social media.