It happens ...
I have an east coast phone number and live on the west coast; about a year ago at 9 pm my time (midnight eastern time, when I was likely to be asleep) I received an email to my recovery email saying my main email one had been changed, within seconds I received a text saying my phone number had been ported to a new device .. bam! They had my 2 part authentication.
It took a few hours of arguing on the phone with my cell phone company to recover my phone number back to my device (mind you, retail stores were closed so I couldn’t go in person till the next day). By the time I was had access to my phone again and email again they had changed pw’s for my Coinbase, Uber, and a handful of other apps which were tied to financial institutions.
I “believe” the game is to secure access and change pw’s then delete any record of email confirmation (my email deleted folder had been emptied) so that by the time you discover there have been changes made and go through the steps to recover your account they have already done damage.
A few days later it happened again, only thing I can guess is it was the T-Mobile app that was compromised since the phone company told me that’s how the changes were being made .... I switched mobile companies the next day
News 
Market Data 
Discover 
