This just keeps on happening, and the carriers don’t ever seem to care about improving their account security.
(One reason I like and respect my carrier Ting (T-mobile/Verizon MVNO) is that they have TOTP authentication available, and customers can use an app of their choosing. It’s astonishing how few carriers offer that, still.)