I got the same message after I used an accounting tool to manage my finances and it used my PayPal credentials to log in as me. I dodged changing my pw for a few months and finally gave in. So it’s likely your creds were used successfully to log in from an untrusted device.