The report doesn't contain much details, but 2-factor auth might have helped. What is also not apparent is whether the stolen credentials were utilized to pull

The report doesn't contain much details, but 2-factor auth might have helped. What is also not apparent is whether the stolen credentials were utilized to pull off data from the accounts? Users might have had sensitive documents stored!