Someone successfully signed into my account bypassing 2fa

[Windows 10]

Someone signed into my microsft.com account this morning from somewhere in France on an iOS device. I immediately signed in about 5 minutes later using my existing password which had not been changed. I was also 2fa challenged to my email with a 6 digit code as expected.So how did someone sign into my account bypassing the same 2fa method. Email was the ONLY 2fa method I had enabled. I've since disabled that and added an authenticator app instead. And no, there's no chance that my email was hacked and that someone got the 2fa code from the login in France and then deleted it without me seeing

Continue reading...