URGET reguest to disable2FA dueto security breach and account risk

[nidalwatfa]

URGENT: Account at Risk - Token Leaked - 2FA Lockout in Restricted Region (Syria)
​Account Username: nidalwatfa
Status: High Risk (Personal Access Token Leaked)
​Description of the Issue:
I am writing this to request immediate intervention from the GitHub Security/Support team. My account is currently at severe risk as my Personal Access Token has been leaked, and I am unable to secure the account or revoke access due to a mandatory 2FA lockout.
​Barriers Encountered:

​Mandatory 2FA Enforcement: I am being forced to enable 2FA to proceed, but I am located in Syria, which is not included in the supported countries list for SMS authentication.

​Recovery Code Failure: Despite having valid recovery codes (as shown in my records), every attempt to use the /sessions/two-factor/recovery path redirects me to help documentation (docs.github.com) instead of providing an input field.

​App/Web Loop: The interface remains stuck in a loop asking to "Enable 2FA" but provides no functional way to bypass this using existing recovery assets or email verification in my region.

​Requested Action:
Due to the security breach (leaked token), I urgently request that GitHub Support:

​Manually disable the 2FA requirement for my account temporarily so I can log in and secure my data.

​Alternatively, provide a direct secure link to revoke all active tokens and sessions.

​I have all the necessary documentation and recovery codes to prove ownership, but the automated system is failing to provide the interface to use them.

nidalwatfa. Nidal Watfa

nidalwatfa99@gmail.com

[krillmango]

Absolutely don't investigate third parties leasing access to non-voip numbers for OTP. Can you instead purchase an eSIM from elsewhere?

[ghostinhershell]

Hey there! We know 2FA may be a new process for some folks and with that comes questions. We put together a FAQ that will help answer your concerns above. If you still have more questions, feel free to ask them here.