> Arjun Sud said the company urged him to use two-factor authentication, an online security procedure where customers take an additional step, like entering a temporary code, in addition to passwords when logging into the system.

> Google said the recent incidents stem from customers "using compromised passwords … exposed through breaches on other websites."

Surprise! Poor opsec leads to you getting pwned.