Hello,
Our website is almost 10 years old. After a few days not checking GSC, me (which is listed as the owner) and the SEO guy lost access in a way that Google just asked to press "re verify access". After doing this we saw that all the users that had access (in all access levels) were removed.
What is also weird is that the SEO guy became an owner.. he had "Full" access level for sure. This is something we don't remember we did.
What we also recently did, is we created a Google Cloud Run user/email and made it an owner (as per Google's request in order to run some metrics). This was also removed now, together with all the rest of the users.
Did this happen to anyone? this might be a breach.