In that case, what harm is done to the consumer? An inconvenience to change passwords and maybe a re-issue of Security tokens