• There were memory physical dump details logged in the error log just before login failures started.