I was next. Same has just happened here with a two letter account. I wasn’t offered two factor ever, although I checked for it frequently.
Do you have any updates? It appears there is a number of two and three letter names which have been stolen. I had, what seemed like, the same person with various 3 letter username messaging me trying to buy my account.
It’s a pretty dire situation.