New owners & new AMP issues detected for my domains in Google Search Console

Hi everyone,

Recently I received emails from Bank of America's Credit Monitoring that said my email was discovered on the dark web and to change my passwords. I have also had a few unauthorized purchases happen.

I have been doing everything I can to protect my accounts by adding extra layers of security.

My Gmail account seems to have a strong level of security. However, I woke up this morning with 6 new emails from Google Search Console: I received a "new user added" and "new AMP Issues detected" email for each of my 3 domains.

I went into my GSC and I do not see any other users besides myself. Also, the user history doesn't show anyone either for any of the 3 domains.

There are however new unrecognized links under the AMP section. There are no unauthorized user tokens showing.

As of right now from what I can see, the new AMP issues are the only visible changes.

Obviously there is a bigger issue going on. My question is what is it and how do I fix it.

I have 3 domains: my primary site, a depreciated version that redirects to the primary, and a merch site. I assume I'll have to check certain files for each website to see if anything was compromised.

Any advice or ways to resolve this will be greatly appreciated.