High chance it would be detected and blocked. The hack involved changing the email, disabling mfa and locking the user out. You can change the email back but th

High chance it would be detected and blocked. The hack involved changing the email, disabling mfa and locking the user out. You can change the email back but their password and mfa would still be gone. They'd also get an email notifying them of the change. For professionally managed accounts that's going to be an instant red flag. Then you have no proof you ever had access to the account.