Rethink getting Authenticators... They've finally been hacked.

The authenticator itself was completely irrelevant in this case. The keylogger stole their login info, and within the window where the authenticator's key is constant, logged the hacker onto the account.

The authenticator isn't ideal - if you steal the authenticator password you have full access - but it's a lot more secure than not having it.