I understand your situation.

From my part, got an account at bittrex since what...2 years... I've been absent on that exchange for a really long while, but I must share something while theres a topic about it.

Since 2 weeks, I'm receiving emails that some people are able to log in into my account. I'm now at 3 or 4 times.

I've decided to put the 2fa on afterwhile.

Guess some hackers were able to access their databases or something, cant say.

For the people who are reading now, that hasnt 2fa on, I recommend you to do so, as soon as possible.