> Somehow Twitter noticed, reset the password and notified me via email. I have no idea how that was possible.

This sounds like pretty normal automated monitoring for what looks like compromised account behaviour.