Once I gave my member number, the attacker used the password reset flow to trigger a text message from the bank. --> They used this to gain access to the accou

Once I gave my member number, the attacker used the password reset flow to trigger a text message from the bank. --> They used this to gain access to the account. How did they to gain access from "password reset flow"? How could they tell your last transactions?