Password Sitez

[markus79]

I have a question about handling password theft when a username winds up on a password site. I already know about having a script detect this and suspend the username.

Is this grounds for cancelling the user completely, or should I just give a warning? How many warnings before I cancel the guy? Can the user come back and say he never gave his password out in the first place and then he wants a refund becuase I cancelled him before his 30 days is up?

Any comments on how you guys handle this would be appreciated.

Thanks!
Markus K
AMJ