Yeah, that answers 1 of the questions. But we still don't know what type of 2FA was being used, or what technique the attackers used.