IT fail:
“This is a legitimate email,” Charles Delevan at the HFA help desk wrote to Podesta’s chief of staff, Sara Latham. “John needs to change his password immediately, and ensure that two-factor authentication is turned on his account.”
Except it wasn't a legitimate email. It was a phishing scam.
And when Podesta clicked the link, he was sent to a fake gmail site that grabbed his password. And then his gmail account was in the hands of the scammers.
The complete absence of rudimentary IP knowledge or skills in the ruling class is breathtaking. Why they should be expected to know better than us on other subjects remains a mystery.