i think i might have been cookie logged

10 months ago, my password got leaked without my knowledge and my account has been hacked. i didnt know until i jus logged in 2 months ago and retrieved it through support. They are still able to login tho despite changing everything and even resetting my history. what do i do? Until now, all my hard-earned items are gone just like that and its really annoying. They arent changing the pass/email tho just able to login without notif from my gmail or having to go through my authenticator