Says my account was hacked, but then gives me the incorrect two letters for the start of my password
Out of interest - are those two letters the start of a password from any other site?
Presumably the leak came from a third party site so it would be your password from there rather than your gmail password.