Hackers could verify stolen data by analyzing third-party cookies and logging into online accounts without having a password, MediaPost reports. NordVPN Security Advisory Board Member Adrianus Warmenhoven said that if an active cookie is stolen, "an attacker can potentially login into your account without having your password or needing (multifactor authentication)."