DanielRuskin

While this is a legitimate concern, it is not relevant to what happened here - the OP didn't enable 2FA and used the same password on his Twitter account (which was also compromised).

Brute forcing 128 bit encryption, depending on the algorithm used, is not trivial.

Remember, the difficulty goes up EXPONENTIALLY for every bit you add.