I had my work email compromised when I clicked on a pdf I shouldn't have. I was bombarded with about 2500 emails in a 12hr period (which is practically a respite compared to
Vinomofo), most from seemingly legit websites asking me to activate or confirm my new account.
Then my VFF was hacked. No idea how they got my VFF account number. They didn't do any damage but had changed the contact email, which I realised when I couldn't access the account and didn't receive any link to 'rest the password'. VFF were very efficient in sorting it out, but only because it was business hours. Why VFF don't have 2FA is a question I'll be putting to them. So now I'm somewhat nervously awaiting the next hack which is a bit like having the Sword of Damocles over my head.