Unfortunately, mobile phones are now seriously vulnerable to hackers and this article on Smart Company reveals that over 1 million Google accounts have been breached due to users accidentally downloading malware:
It seems to only affect Android phones with older operating systems, but if you have Google accounts linked to your phone, there's a site where you can check if your account has been breached.
The site is Checkpoint and you can click here to go there.
It's also a timely reminder to update your passwords, and have different passwords for different accounts.
The longer the password, the better. And try to make it complicated by adding capital letters, numbers, and characters.