I’m glad it seems to have helped. Contacting Qobuz about it would seem sensible, but I’m not sure if they can and will respond with something useful.
As to how the attackers got your password: I depends on how complex your password was and whether you re-used the same password on other websites.
If it was a simple password (like 123456 or a word from the dictionary) it is possible that someone brute-forced it by simply trying many different passwords (with some automation, of course, not manually).
If you used the same password on other sites, it is just as possible that it was leaked from the other sites. E.g., some other service may have been broken into and the attackers got your email address and password this way. In this case, all the other accounts where you used this password are now under threat as well, and you should change this password everywhere. (You should never re-use a password for precisely this reason).
There are several websites where you can check if your email address was included in any of the known leaks, e.g., this one:
It is also recommended to use a password manager, which can automatically create a unique password for every website where you have a login. This way, at least it’s only one account that would be comprised in the worst case, and the same password can’t be used to break into other accounts as well.
On Apple Mac and iPhone/iPad, this is a built-in feature. Use it if you haven’t.
On Windows, something similar is built into some web browsers, but it may be more convenient to use a third-party app that can also sync the passwords to your phone and other devices, such as:
If all of this seems too complex and if you just use a few internet services, then at least use a different strong password for each of them. Keep them on a piece of paper if need be, in a location that ideally only you can access.
Strong passwords don’t have to be difficult to type or remember, by the way. It doesn’t have to be long random string of letters and numbers. Using 4 or 5 random common words as the password is just as safe, provided that these words don’t form a common sentence that can be guessed. At the same time our brains typically remember them well (or it’s easy to come up with a little story that helps you remember). Maybe this illustration is helpful for understanding this principle:
… Since changing my Qobuz password this seems to have stopped. Below Conner suggests that I reach out to Qobuz Support…and have a tech check my account…but they are VERY slow to respond (…but not when it is time to renew…LOL!)…