Deloitte confirms hack exposed email system

It's said that a lack of two-factor authentication on an administrator's account failed to keep attackers out.