The Two-Step Verification went through authy.com which is one of the many sites affected by the massive Cloudflare bug which leaked sensitive information recently.
Many big name websites such as OkCupid, Uber, Fitbit, and more were also affected, so if you use those places, you may want to change your password there too.
You can read more about the Cloudflare bug here:
Google search "Cloudflare data leak" to find out even more.
Thank you to conenubi701 for the heads-up.