This incident has been resolved.

A fix has been implemented and we are monitoring the results.

We are aware a large number of customers have received notifications (email/SMS) that 2FA settings were changed. This appears to have been sent in error. We are still investigating why this message was sent, but no action is required at this time.