It's possible that the TOS message is boilerplate that they put up when they haven't created (and localized) an appropriate message for the real reason (or they don't want to reveal the real reason).
To me it sounds like maybe they detected a successful credential stuffing attack against the accounts and locked them. That said, it sounds like their recovery process leaves a lot to be desired.
To me it sounds like maybe they detected a successful credential stuffing attack against the accounts and locked them. That said, it sounds like their recovery process leaves a lot to be desired.