Reporting on compromised accounts