Scammers hacked the creator of the anti-hacking service Have I Been Pwned. He fell for a phishing attack.

Troy Hunt received an email about the blocking of his blog's mailing lists due to spam. After a long flight, he did not pay attention to the strange address and accidentally gave his entire subscriber base to the scammers.

Hunt reminds you to always enable two-factor authentication. The moral is that even an experienced cybersecurity specialist can be caught off guard if he doesn't get enough sleep.