Changing your password is a common response to account hacks. Unfortunately, it isn’t enough.
Google will use your mobile phone number for verification if you lose access to your account. Some people don’t want to provide that information to Google. That’s a mistake.
I see people lose access to their important accounts all the time. Most frustrating is that it’s often their own fault that they can’t regain access.