From what you wrote it sounds very much like your account got hacked (possibly by accessing your email box) and the hacker himself enabled the OTP.

Now it's been a few days since you opened the thread, can you provide us an update?