On 15 September 2022, somewhere around seven in the evening Pacific Time, an Uber employee got a notification on his phone. It was a push notification from his authenticator app. Someone is trying to log in to your Uber account. Approve? He looked at it, was annoyed, pressed deny.
A minute later he got the same notification. He denied it again.
A minute after that, a third one. He denied it.
Four. Five. Six. Ten. Twenty.