Should be easy enough to post a list of stolen accounts someplace public.