350000 miles stolen!!!

On Sept 9th 350000 miles were stolen out of my account. Two tickets flown SFO-TPE with the flyers names on them showing in my app. Email on the account was changed. Called customer service who requested my license via email. Waiting on response. Outrageous that I never received an email notification that my email was changed nor is there a 2fa option on the account. How long do I have to wait to get my miles back??? Are they going to do anything to the people who flew the ticket???