It’s pretty sad that after decades of such breaches, these still do damage. We have had tech, such as security keys, for some time. Even basic Authenticator app

It’s pretty sad that after decades of such breaches, these still do damage. We have had tech, such as security keys, for some time. Even basic Authenticator app helps. These should be standard with anything remotely sensitive. Another sad point is that there is rarely true accountability. Offering 24 months of some service is a pittance and an expense of doing business that could be factored/priced in, continuing the poor security practices.