A guy managed to hijack 2FA and steal 2 my servers.

So today, 10 of may, a person with user ID of 778289414056837160 managed to reset my alternative account's 2FA with my password and steal 2 my servers: First one has 4000 members and the second one 8000.

He did it by backup codes which are available with password and can reset 2FA, which is incredible stupid.