My Account Was Compromised with 2FA On. How is this Possible?

My password was stolen and I was using 2FA. The culprit was able to change the secondary email without my phone being notified. What's the point of this when it doesn't seem to work. I know I should call customer service right? Well, I did but the all I can get is the foreign help desk that transfers me to security. I signed up for a call back yesterday at 4 PM EST and the wait was 4 hours. By 9 PM EST, I had received no call back so I called again. Once again, I was transferred to security and it started out with a 40 minute hold and continued to go up. When it hit over an hour, I hung up. Comcast has obviously been breached. Thank God, I no longer store any payment information with the company so at least my CC number won't be stolen again. Comcast has a serious problem with 2FA and its terrible, foreign based customer no-service.