Are you sure you haven't used an easy to guess username/password combination and didnt have MFA or a bank pin?
Or that you're using a combination that has been leaked from an external database breach (you can check via haveibeenpwned website, just google the website)?
Or you downloaded a gold...