The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.
Netflix now requires each profile to have a unique email address. It sounds like the era of password sharing is over, but ...