Recently there has been some talk regarding people getting their email accounts hacked even though they are using 2FA. This was achieved by the attacker impersonating the victim by calling the victim's mobile provider and getting a replacement sim sent to the attacker, giving the attacker access to the victim's phone (and therefore access to their 2FA).

It has been recommended that we get a second (cheap) cellphone with a seperate sim card not linked to our identity to avoid this - does anyone have any experience with this, is it necessary or excessive?

By the way I've tried searching for this topic already using the Search function but the search function doesn't seem to be working (see screenshot), cheers