I would guess that the service restored the old password. It fits the evidence and is the sort of thing that a business of that type would do.
Still strange and unexpected from a brand that mostly targets businesses.
Plain and simple it is a massive attack surface and an attractive nuisance for ransomware organizations.