Found the source

Figured out where the breach in my hotmail came from. Somehow my phone got infected with malware pretending to be another carrier. They got my email and by proxy my facebook. I booted them last night and secured my account. May do a factory reset, but honestly, a new phone's probably in order. My old number's been deactivated for a while. That's probably why they weren't able to do more damage. Regardless, glad I figured it out. Last thing I needed was for it to get any worse.