if you have an authenticator then you are fucked because there is no way in hell you can get hacked, trust me, you just don't, first of all a different ip source will prompt for SMS anwer / security question and also then authenticator, they will not buy it.
NOW, if they account did not have...