Accounts are flagged when various users try recovering the account from support, meaning the information is compromised. The last person who can prove ownership of the account will get to keep it and it will be flagged. (support will not read any messages regarding that ID and requested information.)