@nickbilton fwiw, data doesn't really support your 'first 250k users theory' unless these were all phishing attempts: