What we found in this investigation was that there were insufficient measures put in place. There were efforts that were being put out, and there were improvements that were being made, but it wasn't enough.
Multifactor authentication is one example. Back in 2021, it was not mandatory. It was optional. It was made mandatory in 2021, but we know that multifactor authentication is an important tool to prevent these fraudulent claims. Now it's mandatory, but we found that the types of multifactor authentication are not all equal. Some are stronger than others. Some are weaker. We identified that despite improvements, more had to be done. We made recommendations to that effect and look forward to this being put in place.