Weird Login Alert from Unknown Location – Could I Be Hacked?

So, I just got a login alert on my email saying someone accessed my account from a city I've never even been to. I immediately changed my password and enabled two-factor authentication, but it still has me pretty worried. I checked my recent activity and didn’t see any unauthorized changes, but the alert freaked me out. Has anyone else gotten these random login alerts? What’s the best way to make sure my account is really secure? Should I be looking for something else, like malware on my devices? Any tips on what to do next would be super helpful!