My account got logged into by someone in Russia and now I have 1k robux

I don't have photo evidence of the login because I logged it out immediately.

I have 2FA with Authenticator app so I don't know how they got in. I also don't remember logging into anything associated with roblox around the time it happened (3am for me GMT)

Edit: There was no email sent to me telling me my account was logged into