I have 2 step verification enabled on my Gmail account, I am already signed into my account but I have just received a verification code on my phone.
Has someone just attempted to hack my Gmail ?
Probably, or they've used your mobile number to activate 2-step on another account.
Edit: Ignore that, you only get the verification code if you have the proper password. I'd be changing my password if I were you.