It is important on and off to check what is going on in the accounts. Those thieves will not attack the accounts that are active because it is easy to detect rather sleeping accounts.

Of course regular change the password and probably disable the functions that the user does not need and revoke the access that is something that we all have to do and not just hope that it never happens.

Thank you for alerting :)