If you have forgotten your username or password, you can request to have your username emailed to you and to reset your password. When you fill in your registered email address, you will be sent instructions on how to reset your password.
If you're not going to do hacking refunds then add fucking 2FA in game. I don't understand why this still is not a thing