Google Authenticator cloud backup (enabled by default) and social engineering with deep fake breached a software development company

https://web.archive.org/web/20230916081231/https://retool.com/blog/mfa-isnt-mfa/