Bitcoin Forum

Microsoft Support was hacked and hackers got access to @outlook, @msn, @hotmail mailboxes. They use this access to do password resets on users exchange accounts and steal their money. You can read more about it here.
https://cryptostar.money/blog/users-robbed-due-to-microsoft-errors-enable-2-factor-authentication-now/ (https://cryptostar.money/blog/users-robbed-due-to-microsoft-errors-enable-2-factor-authentication-now/)

Hackers are now really using their talents and genius in order to inflict pain to others and to gain wealth for themselves and in today's cryptocurrency-loving society they are finding a big paradise to explore and exploit. Hence, we users have the responsibility to do what we can do on our side in order to protect our digital assets which can easily gone with the wind once these evil people can gain access. We should always use 2FA in all our exchange accounts...this should already be one of the basic protection measures we should adopt.

This is interesting. You have got to be stupid to not enable 2FA related to anything important to you. 2FA is seriously a game-changer, but some people are just too lazy to enable it leading to these incidents.

Such people need to stop being so lazy and need to get their shit together.

They are all talented ever since and they are smart because they can hack anythin they want. 2FA is still not a guaranteed but we must always use the top security on every exchanges to preven from any hacking incident. Exchanges are always prone to this one, just put money on exchanges enough for your trading activities.

Most important thing added 2FA to all of your exchange account, how ever safe your exchange account always have way how to hack and stole your asset, but keep and use 2FA make your account more safety forever.

I would not say that they are stupid to not enable 2FA on their bitcoin related accounts. They are just having less knowledge about security of their accounts. We who have better knowledge should always try to educate them about this thing but if they still do not enable it while they know about it already then I can say they are careless or maybe they are just too confident with their account's password and they think that no one will be able to hack their accounts.

Enabling 2fa is one of the important things on the exchange account because we need to protect the account from the hackers. We don't know how to secure the account, but if we can enable 2fa, at least we can minimize the chance for the hacker to hack our account.
But that is not guaranteed since the hacker will find another way to get into our account and try to steal the coins we have. And if you think that enabling 2fa is not enough to protect your account, I think you need to use verification for the email so every time you log in your account, you need to type the code to enter your account.

Because some people is not aware of 2FA or just don't enable despite of knowing it for whatever reason, I appreciate the exchanges that make it a requirement before using the service. It's an advantage for both the exchange and it's users.

Aside from enabling 2FA, don't forget to change passwords too. It's recommended especially when something like this (hack) happened.

On every website that I have an account on, I make sure that I have 2FA enabled or added additional security if 2FA is not supported. I've once had my Coinbase account hacked (with no balance on it) and the hackers couldn't do shit because 2FA is enabled and my email is pretty much secured. I would have lost control of that account had it not been for 2FA and a strong email password. Additional layer of security should be a prerequisite for websites now IMO especially those with sensitive information and financial-rated services to ensure that their peers and customers are safe from hacking.

Very important to activate this feature in every exchange in order to have extra security, like what this news if you don't have any 2fa all your funds can be sucked by this hackers good thing if you already activated this last resort that you have as they can't do anything without your approval.

Adding an extra layer of security on your account in the exchange site is very important and enabled 2fa google authentication is a good choice. No doubt with the hackers by now they are going to smartest from time to time. If there is an option of sim number authentication then you must also enable this to have multiple security. If necessary change your password at least twice a month so that if hackers know your password and next visit hackers will be lost the password on your account.

Enabling 2FA shouldn't be something that is done AFTER news of hacks come out. Oftentimes when the news comes out, it's already too late if the exchanges don't do a good enough job of securing customer funds or react fast enough.

You should be doing this as the first thing when you open any new accounts on exchanges, before any sum of money is deposited or traded. That said, if you haven't done it, it's never too late, especially if you know that your email provider is one of these.

I've seen so many cases in which users lose funds inexplicably but they can't prove anything because they haven't enabled 2FA. They then proceed to blame the exchange for their losses, but they have absolutely no proof to back it up which means that it leads to absolutely nothing. Just take the necessary precautions and you should be good.

I already enabled 2FA since the first time I register on the exchange because I have a bad experience in the past. I remember that when I am new in trading, I join in Poloniex but I don't read another instruction from them that telling all users to activate 2FA to give more protection to their account. And in one day, I see the suspicious transaction in my account because I see some of my coins have already sent into another wallet, but I know that wallet does not belong to me.

So I asked Poloniex Support System, and they check my account and telling me that someone who can access my account has compromised my account. So they suggest me to change my password, enable 2FA and email verification to withdraw the coins and after that, I don't have any problem.

The thing here is that we should not be using the exchange accounts we have like a wallet because that is not the purpose of the exchange anyway. Though a hack on the site can mean that we can be refunded still it can be sending some chills on our spine when we learn that the exchange we are trusting is suffering some serious breach of security. Having the 2FA done is now becoming very basic both for our protection and that of the exchange itself. As they are always saying, nobody can be careful too much because we can be proven to be two steps late.

I certainly agree with you. Nobody wants to get hacked after all. These people seek knowledge and they would not share this kind of incident just to get bashed. The best thing that we can do for them is to share our knowledge regarding this matter so they would know what to do next time. Let's just stop victim blaming.
On the other hand, hackers are wiser and they move in surprising ways. Enabling 2FA upon registering on an exchange is the best thing that we can do for now.