A leaky database spilled 2FA codes for the tech giants