It appears the hackers set up two-factor authentication on O'Campo's account, so the 6-digit code O'Campo needs to get back into her personal account is going to the hackers, not to her.