Also, the article doesn't state it outright, but the implication is that they only stopped bad actors after they had already been using their services, with no

Also, the article doesn't state it outright, but the implication is that they only stopped bad actors after they had already been using their services, with no indication of how long they were using them for.