Stolen Eth (Exodus wallet)

I woke up this morning to a notification from my Exodus wallet that all of the Ethereum in my account had been transferred out at 3am.

• I've never shared the "12 secret words" generated by the app when a wallet is created,
• I don't use the desktop apps (only the iOS one).

How can someone have access to this wallet? A significant (0.4Eth) amount was stolen. I've reported it here in Australia to the ASCS, and to the US' IC3 since Exodus is publicly listed. What else can I do?

I emptied the wallet to exchanges with 2FA, and changed their passwords. I've also contacted Exodus, although their responses at the moment are leaning more towards "How to prevent this next time".