Interestingly enough, I know a few people who got hacked, and all of them use the authenticator...On the other hand, none of the people I know who don't use an authenticator have (yet?) been hacked in D3.