Brazilians got my Google and Microsoft passwords

I recently got an email from Google saying that someone in Brazil just got blocked from signing into my Google account from a non Google app. I quickly changed my Google password and thought nothing of it.

A few hours later, I got an email from Microsoft saying that "someone else might have accessed the Microsoft account *****@gmail.com (my email address). I then promptly changed the Microsoft password.

Both the accounts were connected to my debit card but there is nothing weird on my statement.

There doesn't appear to be anything at all out of place with either of the accounts.

Is there anything nasty that could still be lurking on my accounts without my knowledge?

Should I still be worried?