I was victim of security breach and 2 of my accounts on gaming platforms were stolen on Sunday Jan, 7.
One was on EpicGames and other here on GOG, all my other platforms (Steam, Ubisoft, EA, WB Games) were attacked too, but the 2FA worked fine, no breachs. On GOG & Epic, even though both had 2FA activated, the security measures didn't work, I don't know why, which make think how secure is this platform compared to others.

I opened support ticket on Epic and GOG the same day, once I figured out the scope of the damages.
Epic responded me in less than a day, and they worked with me to restore my account, by Wednesday all was working fine with them.
GOG... I'm still waiting, I received my support ticket number the same day, but that's all, after complete silence the whole week.
I'm a legitimate customer that I'd put my trust on your platform, I'd spent hundred of dollars here, and I think I deserve the appropriate attention and help in such a delicate matter like this.

Hope some admin saw this and see that this start to progress.

Thank you.

Uhh, don't take this the wrong way, but us forumites can't do bugger about the unfortunate circumstance and I don't think admins exist. You can try poking a blue. Just nearly midnight in Poland, though.

2FA works the same on any platform and has very little to do with Gog or any other shop

your ticket worked because you got a 'support ticket number'... yes it takes them a long time and yes that sucks

in about 2-4 weeks you should get a bullshit email asking if you still need help

You mean "bugger all".

GOG's 2FA works on email code validation. So if you got your account stolen, was it because your email account was compromised?

Anyway, you'll get your account back eventually. But Support is much slower compared to the other platforms because GOG is much, much smaller.

^ What UnashamedWeb said. 2FA on GOG is email validated, and EGS has an email one as well. Your email likely has been compromised.

Also, did you use a common login like Google/Facebook or did you do the right thing and have platform-only logins with strong different passwords?

In any regard I have to parrot the others here saying we can't do anything here because we're also just GOG platform users. The blues are the ones you need to contact, and support of course.