I've used blockchain.com and there's a verification everytime I log in, it doesn't go directly to my wallet. Having that said about the notifications, there's an email notification before proceeding.
Thank you, there was no email notification, and, right, they couldn't get my private keys, the true reason was blockchain.com security breach, which they never admit.
If you have checked it already and no notification has ever found. Did you looked at the other folders of your email? sometimes it's on spam folder and other unnecessary folders of our email. Otherwise, this is like the case that I've seen before that his funds were retrieved by someone although he's really technically aware of what he does and knows how to protect his funds including private keys, recovery phrases and login details.