What should I do if my Oracle account appears to have been compromised?

admin

Today I logged into oci, and while I was browsing the logs, I found that an IP with a non-local (cross-province) IP had logged in previously, and it has now changed sensitive items (account password, API key). But I can't change OCID or access tokens. How serious is it if someone leaks OCID / user access token? If it's serious, how should I address this situation?