Amazon AWS has 2FA, clearly not used (unless it actually was an inside job).

As for the cooling off period, I'm not sure. Perhaps you can get the contents back, but it may be cost prohibitive.