It was likely a phishing attack. A relative of mine somehow got phished for her Google account last month.