[gustavus]

> Sometime in early May 2024, ARRL’s systems network was compromised by threat actors (TAs) using information they had purchased on the dark web. The TAs accessed headquarters on-site systems and most cloud-based systems

So someone was using the same password for the work and personal stuff and no one has ever bothered prioritizing 2FA got it.