The carrier and Apple have been very generous as this is not a hardware issue and cannot be. There is no hardware issue that could cause your Apple password to reset.
Unlike the other people who do not think there is an indication of a hack (compromise, etc) I do think it sounds like you are being stalked or harassed, almost certainly by someone you know or someone they have put up to this.
The way they do this is by having access to your email, as well as adding themselves to your accounts as a 2FA (the code you get via text). They are accessing your accounts the regular way, by having your password and access to your email. To solve this you need to change them all at the same time. Also, if you have ever reused passwords on any website, you need to change all of those passwords the very next thing, and do NOT reuse passwords on ANY website. Learn how to use a password manager such as 1password, it will be far less work than you've already done. I doubt you'll do it but all I can do is tell you how to fix it. It's critical that you do some of these very quickly, ideally in the middle of the night or something when they would be asleep, this will prevent them from getting access again. The rest can be reset afterward once you know they don't have access to your email.
An important note about passwords: if your mom's name is Dorothy and she was born in 1950, and you use dorothy1950! as your password on every website, no matter if you have slight variations or anything, that is trivial to guess for someone who knows you or learns one password.
Obviously you need to make sure you don't lose these passwords! You will lose access to everything if you do. Use a program to generate new ones then write them or print them, along with what service the password is for (again, do NOT reuse them on multiple sites, ever). You may want to back up your photos in case you just somehow cannot keep track of this piece of paper or something, I dunno. Make multiple copies and hide one in your house, do whatever it takes to not lose these.
First, do some prep work. You need to remove any Apple devices they may have added to your account:
- Go into the find my app and remove any devices you do not physically possess or recognize
- This is how they can get 2FA login codes that will grant them access, they can probably also reset your Apple Account password this way. It's important to remove these first
- Remove any of their phone numbers or email addresses from the account so they can't get 2FA codes that way or use them to 'recover' the account and gain access
Without delay, after removing any devices, phone numbers, or emails they added to the account, do all of these promptly:
- Reset apple account password
- Reset your email password. If you have multiple emails reset them ALL
- Reset any google passwords you have
- Reset Facebook password
- Reset bank passwords
- Reset your password for your phone carrier login (Verizon, etc)
Now they will not have direct access to your accounts. Next, without waiting or delaying, you need to make sure they cannot regain access to your accounts with the following:
- Go through all of your email accounts and remove any phone numbers or emails they may have added. These might be in a 'recovery contact' section or just added normally. These can allow them to regain access by doing a 'lost password' button and having a link sent to their email
- Do the same for any google accounts
- Do the same for your phone carrier
- Do the same for Facebook
- Do the same for your bank(s) / credit cards / etc
- Do the same for Apple (again!). You needed to do this FIRST, but just in case you missed something or they added themselves back
Also this goes without saying (I hope), but you need 2FA enabled on every account. Otherwise anyone with the password can log in. You need 2FA enabled.
Now, you can take a break, sleep, eat, whatever and feel confident they CANNOT access those specific accounts. After this you can take the long and painful steps of resetting every single password on each site you've ever signed up for. This is going to take a long time, but you really have no option or you don't care if they can access it and mess with you. It's a huge amount of effort.
But the good news is that if you just use a password manager and don't reuse passwords, you can make it so you don't need to do that again later!
Once you've changed all of those passwords and removed all of their emails, etc. You should be safe. If any were joint email accounts, you need to create new accounts and switch to those instead just fyi.
