The "your username/password is wrong" message came in a timely manner. So someone transformed "some unforeseen error" into a clear but wrong error message.

And this caused a lot of extra trouble on top of the incident.