I have emailed FTP to see if we can unregister everyone except those that are legit, reset the password to something new and go from there.

We'll see what they say