i got an email that my apple id was used to sign into a device.

i didn't do it. I went to my account online and I saw it on my account page and removed it as well as changed my password. I don't know if i need to do anything else. Now that i removed the device I don't have any way to track who's it is or how this happened.