When I woke up on Wednesday morning there were emails from MtGox in my inbox: emails saying there had been trades on my account (I had no open orders), emails saying that there had been withdrawals, non-BTC redeemable codes deprecation notices and one last email saying that my password had been reset.
My password was very secure, I NEVER told anyone my password, I was not using this password on any other website, I have never been on a phishing website or on websites like mtgox-chat, there is no key-logger on my computer, my OS is Linux, etc.
I am quite security-aware and I never had a problem with any of my account being hacked. I also checked the activity on my Gmail account and there were no suspicious connection.
I could not understand what happened the issue is almost certainly on MtGox side.
So I tried the password recovery procedure and it was not working. I then sent an email to the support explaining everything. I also sent a message on Twitter.
I had not a single answer for two days nor could I connect to my account. These were two very painful days. This morning I finally received a message from the support saying they cannot do anything and I will not be refunded.
I am not familiar with non-BTC redeemable codes but it means the hacker is transferring some funds to an other MtGox account, right? I cannot understand why they are saying they cannot do anything. Beside the password recovery procedure is still NOT working. I still do not know if there is anything left on my account.
I had been selling Bitcoins for a couple of weeks and there were around 20,000€ and 63 bitcoins on my account. I received 6 withdrawals emails and 4 non-BTC redeemable codes deprecation notices.
According to the emails, the hacker bought 100 BTC then sold 70 BTC then bought 70 BTC. The trades were done at around 180€ per Bitcoin.
My account had a "Verified" status. Anyone know what are the withdrawal limits? I hope there is something left on my account...
Of course I sent an other message to the support but they are so slow to answer. I will keep you updated...
In the meantime be very careful with your MtGox accounts. If you do not have a Yubikey you should move your money NOW.
I just had a similar situation. I'm locked out waiting for them to reply. Weird thing is, I never got an email saying my password was changed nor that my email was changed. I never got emails saying that there trades either. And yes, my password sounds like it was as secure as yours. There could be a few things going on here. But in any case, I'm waiting to get into my account to see if everything's gone. I really hope that the account got frozen. But I'm not going to hold my breath. If it works out, I'm going to get the 2fa like you said. If not, I'm done with exchanges.