Review is the key. They're using it as an indicator of bad behavior to provide direction where other bad behavior may be. The IP didn't identify the person, bu

Review is the key. They're using it as an indicator of bad behavior to provide direction where other bad behavior may be. The IP didn't identify the person, but it did potentially implicate accounts that needed to be reviewed or that may have been compromised.