Originally Posted by ajinlondon

Yes I have 2fa and your assumption isn't correct. 2fa is not required for this scam/ theft etc.
as above I in essence went through the same steps on the phone call with chase. "Here is the new password" and once they are into your account they update the personal details section. All very basic.