Cell carrier was weakest link in hack of Google, Instagram accounts Carrier was social-engineered by hacker to steal man's two-letter Instagram name.
by Sean Gallagher Nov 3 2014 Ars Technica
If you think the two-factor authentication offered by Google and other cloud services will keep your account out of the hands of an attacker, think again. One developer found out this weekend the hard way; Google's account protection scheme can be bypassed by going after something most people would consider an even harder target-the user's cell phone account.
...
-or-