Account was hacked without 2VS but with 2FA

It was hacked and I have over 200+ emails in the span of 5 hours asking for verification codes. They eventually got in and changed the password and added a passkey I believe. I have proof such as roblox recipes ranging from years ago and the emails. What steps can I take?