So what's "FA" mean?
Did he use 2FA so that everyone he hacked believed that they were secure? I expect this will need to evolve to protect everyone more efficiently ... running some checks I'm seeing that 8FA is very secure although it does take a while.