Users who were not active on Twitter during the first one to two days of the ColdCard incident were at significant risk