“Dramatic and persistent spike” in account takeovers is “substantial drain” on resources.