--- title: When MFA isn't actually MFA | daily.dev description: On August 29, 2023, Retool notified 27 cloud customers that there had been unauthorized access to their accounts. The attacker was able to navigate through... canonical: https://daily.dev/posts/when-mfa-isn-t-actually-mfa-mua6zr2dn twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: When MFA isn't actually MFA | daily.dev og:description: On August 29, 2023, Retool notified 27 cloud customers that there had been unauthorized access to their accounts. The attacker was able to navigate through... og:url: https://daily.dev/posts/when-mfa-isn-t-actually-mfa-mua6zr2dn og:image: https://api.daily.dev/og/posts/Mua6ZR2Dn.png og:image:alt: When MFA isn't actually MFA og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # When MFA isn't actually MFA **[Community Picks](https://daily.dev/sources/community)** · 7 min read · 3 upvotes · 1 comments ## Summary On August 29, 2023, Retool notified 27 cloud customers that there had been unauthorized access to their accounts. The attacker was able to navigate through multiple layers of security controls after taking advantage of one of our employees through a SMS-based phishing attack. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@dailydevtips** · 1 upvotes > Wow really appreciate these deep background stories, also very well explained in layman terms. > > That poor one enployer though 🫠 > You reckon its common for hackers to go through these lengths? Including deep faking a It members voice 🤯 ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cloud](https://daily.dev/tags/cloud), [#google](https://daily.dev/tags/google), [#crypto](https://daily.dev/tags/crypto), [#vpn](https://daily.dev/tags/vpn), [#okta](https://daily.dev/tags/okta), [#retool](https://daily.dev/tags/retool) [View this post on daily.dev](https://daily.dev/posts/when-mfa-isn-t-actually-mfa-mua6zr2dn) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"When MFA isn't actually MFA","url":"https://daily.dev/posts/when-mfa-isn-t-actually-mfa-mua6zr2dn","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/when-mfa-isn-t-actually-mfa-mua6zr2dn"},"datePublished":"2023-09-16T02:47:13.213Z","dateModified":"2023-12-07T12:02:45.284Z","description":"On August 29, 2023, Retool notified 27 cloud customers that there had been unauthorized access to their accounts. The attacker was able to navigate through...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a2a4a2cf8b177f9adbc6718a083efe5c?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a2a4a2cf8b177f9adbc6718a083efe5c?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"Community Picks","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Community Picks","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1655817725/logos/community","url":"https://daily.dev/sources/community"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/when-mfa-isn-t-actually-mfa-mua6zr2dn","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"security,cloud,google,crypto,vpn,okta,retool","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Community Picks","item":"https://daily.dev/sources/community"},{"@type":"ListItem","position":3,"name":"When MFA isn't actually MFA"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/when-mfa-isn-t-actually-mfa-mua6zr2dn","comment":[{"@type":"Comment","text":"Wow really appreciate these deep background stories, also very well explained in layman terms.\nThat poor one enployer though 🫠\nYou reckon its common for hackers to go through these lengths? Including deep faking a It members voice 🤯","datePublished":"2023-09-16T07:56:56.242Z","url":"https://daily.dev/posts/Mua6ZR2Dn#c-8KCLH6DNr","author":{"@type":"Person","name":"Chris Bongers","url":"https://daily.dev/dailydevtips","image":"https://media.daily.dev/image/upload/s--9gxFz1e7--/f_auto/v1705902590/avatars/avatar_JUNiIGCV-?_a=BAMAMiZW0"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1}}]} ```