This, they don't say, maybe they don't even know, since:

> In an abundance of caution, we revamped and migrated to a completely new 2FA infrastructure.

> 2FA tokens for all users worldwide were subsequently revoked to ensure the new infrastructure was in effect.