More than likely, the email attached to the account was changed when lindsay took the account and locked jenny out, then the bio changed, then lindsay may have tried to make more changes this week, could've even tried to change pricing tiers or bank details or anything, any series of changes combined with the main email change could have triggered them to contact the original email, it may well have not triggered when the email account was changed but suspicious activity built up and they then acted on it.