I think Atlassian handled this okay by explaining themselves and requesting proof of identity. His name looks common enough that it is probably a case of mistak

I think Atlassian handled this okay by explaining themselves and requesting proof of identity. His name looks common enough that it is probably a case of mistaken identity. The one thing they could have done better would be to provide a grace period, but I doubt that would be compliant with the law.