Yes. Once an attacker has gained access to an email account, they may change settings to maintain access or secretly monitor communications. Check for unfamiliar forwarding addresses, inbox rules, recovery details, connected applications and devices that you don’t recognise.

It’s also important to check whether emails have been deleted, moved into different folders or automatically forwarded elsewhere. Your IT support provider can help review these settings and determine whether any unauthorised changes have been made.