ah well 2FA is not 100% secure
use also authenticator apps
application gives you like a one time code
which refreshes every 15 seconds or so
and dont click random shit you are not familiar with
in last 3 years that's 3rd account which was stolen from me
go here and check if you have been pwned
https://haveibeenpwned.com/
write your mail there and hit search
one was battlenet where i had overwatch with 1000 over lvl, and some money spent on it, diablo 2 res, diablo 3 with all dlc, also one discord account and my post account
check your all emails and see if there was any other breach
there is nothing from what i see on my 3 emails