That hackers got into Patel’s gmail account suggests one of two possibilities: his device or devices were hacked, or his password was phished and he doesn’t use good 2FA.
@SteveBellovin or stealer malware that make 2FA worth jack shit.