The breach potentially some exposed message logs containing data like phone numbers that used SMS or voice-based multifactor authentication through Cisco Duo.