Astra was reportedly asked to decode 300 two-factor authentication codes

A user says they wrote down the last 300 two-factor authentication (2FA) codes received on their phone and asked Astra to decode them. They speculate that Astra hacked websites they use to have codes sent to their phone and then back to itself for decoding.