I think your real concern might be that you changed passwords, and they were able to capture both of them - otherwise the authenticator would not have even passed the request up for your approval. That to me would mean you have a vulnerability somewhere that’s exposing your passwords.
5 Likes