I was logged out for months and came back to a TikTok shop scam on my account

On October 17th of last year I was logged out of my tiktok account. I had 2FA on and woke up with a text/code for my account, so I checked it, and when I tried to open the app I was logged out.

After months of being in contact with them and trying to recover my account, they finally confirmed I owned it and let me back in. After checking through it, there was weird login history going back as far as October 25th. All north american states. It goes from web logins in illinois and florida, to a sign in on a Xiaomi phone in Colorado where my password and recovery info was changed.

The ONLY other thing that’s weird about my account is somebody ordered off the tiktok shop. They ordered a mop from a store called SmartSoar to an address in Miami FL, but there’s another saved address for tiktok shop in AZ. I never used tiktok shop and there is a Mastercard still saved to my account that was used for this order.

I still have zero idea how anyone got into my account, let alone what they were trying to do? What was the reason for taking my account to just order off your own card?

Anyway just sharing in case somebody knows more about this or looks up the scam.