Originally Posted by Azoy?

contact the user with a new PW and give him the benefit in case someone stole it from him.
if you see his user name being used like crazy still afterwards disable the mother fucker.