[iamricks]

I've mentioned this before[1], we once had a domain stolen because somebody called GoDaddy and was able to get the 2FA code removed with a phone call and they had some leaked email credentials for the account.

We had to call GoDaddy and cancel the domain transfer, they would give us no information on how it happened.

[1]: https://news.ycombinator.com/item?id=29308613