That hackers got into Patel’s gmail account suggests one of two possibilities: his device or devices were hacked, or his password was phished and he doesn’t use good 2FA.
@SteveBellovin Or he reused his password from somewhere else that got popped.
@wendynather @SteveBellovin hotrocket1 is totally a secure password