They've supported MFA for awhile, so simple enough to reset a password and make sure MFA is turned on.
I prefer when companies are proactive.