okta was hacked through employee credentials stored in private google account that got compromised. fedramp requires two factor authentication with second fa

okta was hacked through employee credentials stored in private google account that got compromised. fedramp requires two factor authentication with second factor been physical token