Okay, if that was the only things going on I agree with you! Catching someone ellses username and pass and using it is then only the user getting hacked or phished..

Thanks for clearing that up!

On the other hand, it can only be possible then because these users were not using google authenticator or other 2 factor security!?? Unless they somehow managed to hack the 2 factor also for the accounts? I doubt that though.. Probably users without 2 factor enabled.

But to be true I did read about people talking about the API keys. Maybe just myths being spread.

Thanks friend. I agree that I do not KNOW for sure, we are all just trying to get things straight together here! cheers! I will follow you. Anyone who want to, please follow me and help me get started quickly here!

-kongen