Yes, it was passed by legal and everyone else. The first warning was automated and the password wasn't revealed. It was only on the second pass once you had ample warning.

But to be fair, I wouldn't do that today. I would just shut off the account on the second pass.