Zerodha sends a confirmation email and SMS to notify users when the password or 2-Factor Authentication (2FA) (6-digit pin) is reset.
If the credentials were not changed, it could mean that someone else knows the password and 2FA. In such a case, use the Forgot password option to reset the password immediately. See How to reset my Kite password? Create a ticket if the password reset is not possible.
