 These users use MFA and more multi-factor authentication, which you would think would protect them, but they were able to do a SIM swapping technique where they would go to a cell phone store in a mall and find some way to convince someone to change the SIM credentials.