360M inactive users can still be effected. Both of the active users probably don't have ID's worth stealing. 😜