My gaming profile got reset after a suspicious login from Brazil—what’s the safest way to recover and secure it?

I logged into my favorite online RPG yesterday only to find my character completely wiped out. The game’s security emails showed a login from São Paulo, Brazil, at a time I was definitely not playing. I’ve already changed my password and enabled 2FA, but I’m worried if someone still has access or if my linked email might be compromised. I tried contacting the game’s support, but their response times are slow, and I’m afraid of losing in-game purchases or progress. Has anyone dealt with a similar situation where a foreign login wiped game data? What steps helped you fully regain control and protect your account beyond just changing passwords? Also, should I consider changing the email linked to the game account, or is 2FA enough? Looking to avoid this nightmare again!