everyone beware of this coinbase scam

So what a disastrous & stressful 6 hours. Thank god i was able to freeze my account in time but I want to share this story so others do not fall for this scam. I used my coinbase debit card earlier today. Not too long later I get a text message stating someone tried accessing my account so my account is locked. I try logging into my coinbase & sure enough somehow I was logged out & unable to get back in. I then get a phone call stating they are coinbase & that they see I am trying to get into my account. I then got an email from the real coinbase stating to reset my password (i checked the email address & it was indeed the real coinbase email) so i clicked the link to change my password. After doing that I had to type in my 2fa. After that it was all downhill. I got a text message stating my 2fa was changed. So im assuming my phone was hacked & this person was able to see the numbers i typed in. I was able to beat the scammer in time by calling the real coinbase and having all my info locked. As of right now I am unable to access or see my funds being I am still locked out. After further investigation I realized these scammers somehow had access to my emails because there was emails in the trash bin that I did not erase. Emails from cointracker from when i filed taxes. So I assume it was a data leak from them because that was the first of my info to be accessed (the erased emails were from before I got the call or email from coinbase). Most frustrating day of my life. My lesson I learned is im gonna get all my funds off the exchange and put it into a wallet as soon as I get access to my account. Sorry for the long ramble but wanted to share this with you guys.