Once someone gains access, it is very hard to discern (without a human manually looking into it) who the legitimate customer is. This is in the domain of customer service and can not be done automatically.