Hacker gang broke into AMD because of workers’ terrible passwords

"Hacker gang broke into AMD because of lack of MFA" might be a more useful way to put it, especially for IT departments that might get an email from a panicked exec demanding unworkable password policies.

Single point of failure ?