This got me thinking about the current level of password protection on AC/AE accounts...maybe adding two-step or multi-step authentication?

From Krebs on Security re hacking of TRAVEL loyalty program accounts:

"“They got into the account and of course the first thing they did was change my primary and secondary email accounts, so that neither me nor my travel agent were getting notifications about new travel bookings,” said Brothers, co-founder of Verafin, a Canadian software security firm that focuses on anti-money laundering and fraud detection."


http://krebsonsecurity.com/2014/11/t...ints-accounts/