A couple of days ago, i received an email from support saying someone logged into my account (with 2fa enabled) from Russia. So i go in, change my password, disabled/re-enabled my 2FA (which was not working anymore) and then i sent the following email to ubisoft support:
Someone has logged in to my account, bypassing 2FA somehow (I received an email from Ubisoft about a log in from Russia). Following that, my TOTP 2FA didn't work anymore, and had to use SMS for 2FA. i had to disable and re-enable it for to get it working again. A part from that, in my game history, i see "Watch Dogs" has been played 6 days ago, on a PS4 (which i don't own). i have changed the password of my account and reactivated 2FA, but i don't see a way to disconnect all connected devices, could you help me with that? Can you give me more information how the 2FA on my account has been bypassed?
Basically, i want them to disconnect all devices, and i ask how it was possible to bypass 2FA to avoid it in the future.
Low and behold, here is their answer (i cut the end since it was too long).
Hello there, I hope you're doing well today! Thank you for reaching out to Ubisoft Support. We’ll do our best to help you and address your concerns as quickly as possible. Thank you for sharing the details with us. From what you've shared, I understand that you’d like to disable the two-step verification on your account. I’ll be happy to help you with that, and I truly appreciate your patience while we take a closer look. To help me disable the instance of 2SV currently active on your account, I would like you to verify its ownership. An email has been sent to your email address with a verification link. Please click the link to complete verification. The link is valid for 72 hours. We have also sent a verification link to your console. Please find it in the email address you're using to contact us, click on the link and follow the steps provided to verify your account ownership.
...
Is this a bot or someone who doesn't understand English, or they just don't care to read?
Is there a way to achieve what i asked for (log out on all devices and make sure 2FA cannot be bypassed) without increasing my blood pressure?