Hole in account security?

Got an email today saying I imported my main to a jagex account when I've never had the jagex launcher before. I have an authenticator, but have no way to recover the acc other than submitting a ticket because transferring to jagex launcher disables the email... Can't log in through runelite either.