[icebraining]

The attacker got SG to change the email on file, so the notification would just be sent to him.