The official X safety account, Safety, released a preliminary investigation about the @SECGov account being hacked. It stated: According to the investigation, this vulnerability was not due to X's system being compromised, but because an unidentified individual gained control of the phone number associated with the @SECGov account through a third party. It also confirmed that two-factor authentication was not enabled when the account was hijacked. Safety recommends all users enable this additional layer of security.