4 ms·

There is no reason to think, in this case, that it was a person they "didn't authenticate".

• hunter2_ 10y ago
  It's easy to think that, IMHO. Pre-arranging a challenge, recognizing by voice, performing a call-back to a widely publicized/trusted phone number... I really doubt anything like that occurred. And even if there was authentication, now it's time for authorization. The only authorized recipient of a password is the exact same entity with which you established the password.
  • Joeboy 10y ago
    What do you think occurred?