According to his blog post [1], it sounds like the other account that was engaged in fraudulent activity was notified, but "his" account was not.

[1]: https://blog.kapeli.com/dash-and-apple-my-side-of-the-story