Password reset requests that I’m not making

In the past two days, I've received two messages to my gmail account (which is backup to my hotmail), saying that a password reset request has been made for my hotmail/outlook account. Yesterday, the message said my account was verified and asked me to reset the password. (Yes, it was definitely from Microsoft; someone had tried to set up an account in my name.) I clicked on the link in the message to cancel the request. This morning, I received another message from Microsoft in my gmail account, asking if I'd requested a password reset. I again clicked on the link to cancel, and the page I got to said the link had expired. I'm concerned about possible access to my account, though I have 2-factor authentication set up on both gmail and hotmail. Is there anything additional I can/should do?