You still have access to your phone number? So not been sim-swapped hacked?

I guess we will find out (I hope) how it happened.

But surely there should be some automatic red flags with Twitter if an account changes name, email and starts spamming... Especially if verified!