That hackers got into Patel’s gmail account suggests one of two possibilities: his device or devices were hacked, or his password was phished and he doesn’t use good 2FA.
@SteveBellovin Or he put his password on his web page in case he forgot it (and 2FA).