[2020] Still heard nothing from jagex on why a hacker was given control of my account for 45 BIL via recovery. Something is wrong no one should have known my username and I’m not the only one hacked like this recently

Want to point out a few things first

My account isn’t banned, I’m not making this thread as some kind of appeal. I kept getting accused of rwting the gold again, if this was the case I would have shut up and taken my money.

After the post I got several pms and links to other people who got hacked in similar ways, with no way to know the username.

I was lax with my pin settings as my username could never have been known by anyone, others has said the same and it is possible someone is recovering using display names for huge wealth accounts. I also had 2-f on and jagex guardian, it was insane to think anyone would have got my account via recovery with none of the security settings I had. This raises some worrying questions about Jmod integrity, remember this is over gold to the tune of £25,000.

I have had a huge rs bank many times very pubically for like a decade of staking now, yet no one has ever found out my username or recovered on me before, something recently has changed to allow this.

I just want a jmod response (or pm) telling me what made them let a hacker into my account. I had 2-f set up and my email was not compromised. Everything on my end was kept secure yet jagex handed over my account, this would never have happened with any other company, letting them instantly bypass 2-f, email, jag guardian and my password to instantly get into my account is worrying to say the least.

Edit: Regarding social engineering/database leaks. First off, my account username was some random words I have never entered anywhere but the client, and had name changed about 10 years ago before I ever went public on the account (was a summoning tank, had a random name before 999134thpure and summoning tank). If assuming they somehow got this anyway from something I missed, isn't it a massive security issue that my account was given away with no locked period, to someone who only knew public information about me, and didn't have my email (which I have used only 2 on the account for its 10 year+ history), my recovery questions/jag guardian, my password (I change this every few weeks when active, and I had a new password about a week ago, no leaks here) or access to my phone for 2-factor.