3 ms·

I just want to add that if they really cared they would just demand 2FA (assuming it's not broken), or atleast reset the passwords like linkedin did.