JUST IN: X confirms the SEC's account was hacked and did not have two-factor authentication enabled.

@WatcherGuru