Checking again and looks like they updated their original comment. They got phished
https://news.ycombinator.com/item?id=45169794
Please read any communications CLOSELY and check sources. Never log in from email links! The strongest 2FA methods like U2F are phishing resistant.