@0xcuttlefish
So if I'm understanding correctly, your account had a mobile number associated, but it was not enabled for 2FA, and even though you weren't using SMS 2FA the hackers were still able to take over via the mobile number?
Is that correct?
If so I really dislike that Twitter Blue requires a mobile number to sign up.