and is going through and changing password for my other accounts.
I’m using Duo for 2fa and fingerprint on phone. but I think the hackers got in through my phone through a fingerprint exploit as I never received a Duo push request
Is is possible to get back in with my recovery codes or are they only for 2fa replacement?
Is there a way to ‘burn’ the account to keep them from changing all of my account passwords and accessing my credit cards? I sent emails to support buy haven’t received a response yet.
I will try to help, but I don’t know much about some things that involve something in legal terms and cyber defense. What I know in practice is about algorithm development and research. In this initial notice and reading about your general questions and problems I will try to help you in the best possible way, I apologize if I cannot help you.
When an account gets hacked you usually try to see the situation from 3 different angles, think of it as a rating, a triage, a status.
2.1 For example, if someone has access to your account. In this specific case, the angle is of the severe type. So why the hacker can have access to everything.
2.2. About this, try to contact your credit card company or banks you own and request the block immediately.
2.4 After all, even if they change the password, the locked card can prevent anyone from using it. Try to do this as soon as possible.
2.5 After that, even if you forget the password of most sites you visit or even someone (hacker) changes the password, most sites have a way to recover using your email or cell phone. And even if they (hackers) change your email or cell phone number on these websites and accounts, you can prove it. If you access email, most websites will send you email notifications. If they have access to email and exclude access to those notifications, that’s quite tricky. And I don’t know what we could do.
If you don’t remember or don’t have access to most sites, a tip is to check if you login with google, if you login with google, there is a list of sites you have connected to, from there, you you can try to close the connection to these services if you notice that someone is accessing from an unusual location.
About Bitwarden, I don’t know if you can request account deletion if you don’t have access. But, it’s worth trying and seeing this. In theory it makes perfect sense, no one would ask to delete the account if they don’t have access to the account.
I don’t know if it is possible to recover the password with recovery codes.
Let your friends and family know about this problem as soon as possible, to avoid serious problems, it is common for someone to try in these cases if they pass you by.
I hope this answer is the most complete and that it helps you in some way.
@svmike We had an incident a couple of hours ago, where users experienced issues logging in. Could you please try again and see if it’s still a problem.
I want to thank everyone for their thoughtful replies!! This was a terrifying experience, however @djsmith85 was right, I was just able to log back in - and change the password. I recently switched to Bitwarden from dashlane because of the integrated 2fa, file attachments, notes, custom fields and - the price!