Account Hacked Recovery

I received an email that my X password was changed and 2FA enabled, both of which I did not initiate.  I was able to reset my password but I cannot log in since I’m now being prompted for a verification code from a code generator app that I don’t have and was setup by someone who tried to gain access.  No response from X yet on how to address this so I can get into app.  Any insight would be appreciated.

TIA!