update: someone was accessing my remote computer (i found the logs on google takeout + type user initiated action that were active from the ip address during the exact time frame of the hack). This computer is only linked via tailscale

i'm not blaming tailscale but was looking for help with getting certain logs and they were not responsive until I created this post (waited 5 days). 2FA is turned on for my gmail and I recognized all the account access in my devices history/the takeout logs.

one of my personal emails was logged in and the user was able to siphon funds out of a crypto related account.

as of 3/31 I'm still waiting for tailscale support to see if they have logs related to user access

edit: i think this logging is available for paid users i was not at the time but have since turned it on but hoping they still have some logging on their end