simply pursue all avenues to prosecute the attackers every time...leave innocents alone.
if "half" the accounts are "unpaid"...and there are 1.6 million accounts, then you say disable 800,000 accounts due to a few peoples attacks?
unreasonable and whiny!