Several of my friends/family members got email messages from my Hotmail account that weren't sent by me.  When I heard about this I immediately logged into Hotmail to change my password, which I was able to do.  I also set up two factor authentication at that time.

 

While in my email account, I checked the sent messages folder and I found no evidence that messages had been sent.  However I did find in both my inbox and junk mail folder messages that had bounced with a 'mail delivery failed' message due to a message being sent to an email address that was no longer valid.

 

At least one of the messages was sent after I changed my password and set up two factor authentication (SMS to my mobile).  How is this possible and how can it be fixed??

 

Thanks

 

David