3 ms·

Sounds like he didn't have 2-factor authentication turned on anywhere.

• t0astbread 7y ago
  2FA was mentioned in the article. The attacker used a recovery option to gain access to his account.