A common method of attack is "phishing" - sending
emails that attempt to trick a user into sharing their login credentials.
Phishing emails will often warn a user that somebody has tried to access
their account, and suggest they change their password immediately.