Hows this possible? My account is secured with 2FA, though they passed it twice, without even sending me an email in seconds, how could this happen? I have absolutely no malicious extensions and haven’t really ran any malicious programs, I don’t really understand.
I’ve had secure passwords all the way, randomized gibberish and all that, I still don’t understand how this could happen.
Cookie logging or RobloSecurity.
I haven’t been outside of my own server, and neither have I clicked any links to anything, which still makes this strange.
Go into your Account settings, Go to Security, And remove all devices that are using your account, That aren’t yours.
You might’ve enabled a VPN , or what Clxzed said. If none of these is what lead up to it, You should still remove the account from the devices, and change your password.
I removed the login as soon as I got the notification, it happened at-least twice before I changed my password and added a pin, I have no idea why it happened still.
Did you enable a VPN, I’ve had the same situation, Where my account was accessed from Texas, And the Netherlands, I used a VPN, And those logins popped up for some reason.
I don’t even have a VPN, and neither do I have chrome installed, I use firefox.
I know it does seem irrelevant, though I was recently replied to by support for my ticket, around the time it happened.
I’m not sure, but I’m hoping some random staff didn’t just login to my account.
Well hm, I’m not sure, i would suggest you change your password, Which you already did, Which is good, Make sure the password is not used for anything else, And you should be good, If it happens again, Just repeat the process… Change password, etc. But highly doubt it would happen again.
didnt see the edited part.
No no, You cannot Staff cannot access your account. They have no reason to, They can see all players info, Without logging in. Hope that helped you a little bit 
You are speaking like you know everything about roblox, it’s an outdated and weird platform, you cannot exclude that.
Additionally, what is that extension?
I’m not, But what purpose does roblox have, to just access your account?
The plugin is RoQoL
The extension’s main website I believe is: https://roqol.io/
I had a support ticket regarding transactions and I’m unsure if that’s what they needed to view it, but I still wasn’t going to let it in my account.