Even if you don't intend to delete your Coinbase account, this means that they have your valid password and just need you to get them past the 2fa. Change that password and anywhere else that you've used that password.