This stolen information can be used by cybercriminals and sold underground or used to take over the account.
If compromised, change the password or regenerate new backup codes immediately,advisesTrustwave SpiderLabs in a blog post.
source: www.techworm.net
