An executive admitted during a meeting that a breached account had failed to use multi-factor authentication, according to materials reviewed by NBC News.