Sort:  

They hacked the exchange not the user from what I understand so 2factor prob didn't help. That being said it is still a mandatory security practice to user in all cases.