How do you deal with accounts that were suspended with SCIM bridge and then reactivated?

We had a questionable email compromise situation, and we blocked sign-in from multiple users. This then suspended 1Password. We unblocked sign-in, and it reactivated the account, but the users were ...