In the last two weeks I've had notifications from Facebook, Twitter and Instagram that there have been login attempts in places like China, and asking me to confirm if it was me (it wasn't) and then change my passwords. Is this a common thing? Has someone just got my email address and is bashing it in on random social media accounts?