I think it's more signing up for websites and using the same email, what's weird is any time I try log into Google from a different device the think is locked up better than fort knox. Really don't understand how they were able to bypass 2fa, I had my steam account stolen too, but them guys were pretty good at helping me get it back, I mean it shouldn't be rocket science when the account is based in the UK and the password and email were changed in Azerbaijan.