One Million Two-Factor Authentication Codes Were Recently Exposed