Help, my account is being hacked and cant change password

Help me, pls, today i check my mail and got 10 access codes, from this ip 113.173.82.201, i tracked the ip and seems somebody on vietnam, im from colombia, so thatsnt me or some of my friends (no one of my friends have my password but one or two know the username, and i havent logged in 3 weeks) seems like someone is trying to enter my account, so i loged in to try change the password, but when i try, it says ¨you old password isnt correct¨ then how the f*ck i was able to enter my account lol, i log out, and then log in again, with the same password, and everything seems normal, even log in game to see if my characters where deleted or something, and everything works fine, but when i try to change the password, it shows me again that the password is incorrect, thanks god i have the two autentification, if not, my account would be empity at this moment, but that doesnt make me feel safe, i need to change my password, but this website isnt allowing me, is this server getting hacked or something? did somebody leak the usernames?

Nvm, manage to change the password, somehow seems like i got 2 different passwords Actives, i mean, i have a password with special characters, such as #$=)%, and with that password i logged on game, but seems like now is impossible to have special characters on password so the web page didnt recognize my password, (well, it does when i log in, but not for when i try to change it) , so i tried to log in with a old password and surprising it works lol, seems like the page is having some problems.

Still, im pretty confused on how a vietnam guy manage to get my account username and password, if you re guessing, no, i never have the same password/ username as other websites/apps/games, so it must be a server leak or something like that.

A reminder that someone doesn't need your password to trigger 2FA code email when logging ingame.
Ingame, 2FA email is sent BEFORE the passowrd is checked, so if i type in your username and the wrong password, you still get the email for 2FA.
It's probably nothing to worry about, make sure your email is secure also and that's it.