did you at least put a responsible error message for all people with failed logins to mitigate the issue?