Someone has recently changed my recovery number, I was able notice it and changed it back (as well as changed my password) within the hour so I don't think there was any real damage done. I still have the automatic fido email with fraudulant recovery...