From Michał Zabielski's comment:
Unfortunately you are out of luck. Never share your word phrase with anyone. If you do, you effectively give access to your money to someone else. If someone asks you about your word phrase (or anything related to private keys) you can be pretty sure that it’s a scam.
To clarify, the device's security was not breached. In this case the device worked just fine. Unfortunately you shared information which you were required to keep secret. (From Nate Eldredge's comment).
Luckily the BCH was not taken, because it was still in your wallet, you had time to retrieve it which it sounds like you did:
I was able to move the BCH from one account to another account I added on the Ledger Nano s. From there I was able to sent the BCH to external wallet. I did put my 24 word recovery phrase out there just for a second . From that a bad guy was able to search for, locate, send the cryptos stored on my Nano S to another address.
An email trade approval conformation would be a great addition to security here.
Unfortunately your seed words directly create your private keys, which are all that is needed to spend funds in the bitcoin network. Bitcoin only understands signatures from private keys, there is no room for email verification or anything, because of how the network works. So I'm afraid something like that wouldn't be possible. That is why sharing your seed words or private keys is so dangerous.
Sorry for your loss.