Comment by galadran

From looking at the Reddit "master thread", everybody reporting they were hacked reports 2FA disabled. Everybody reporting no hack reports 2FA enabled.

Sounds like reused passwords!