i’ve had that “session expired” loop too, and in my case clearing cookies fixed it without needing another password reset. i don’t think it automatically means someone got in, but it’s a good reminder to enable 2fa and check account history if they show last login details. i got extra wary after seeing my browser autofill try to reuse an old password when i was redeeming free spins on
https://no-deposit-bonuses.co.nz/free-spins/ and it made me audit all my saved logins. if you’re still uneasy, change to a unique password and log out of all devices, then see if the loop stops.