> even though it wasn't their fault that OP's account was compromised The article strongly suggests this isn't the case, though. OP had TFA active, but Uber al

> even though it wasn't their fault that OP's account was compromised The article strongly suggests this isn't the case, though. OP had TFA active, but Uber allowed access to his account without without requiring the passcode they texted him. We don't know exactly what happened, because the support rep dodged the TFA question every time, but it doesn't appear to be a proper outcome.