Reports a security event for a user, driving progressive account lockout under PSD2. — RESET_PASSWORD_COMPLETED revokes every active SCA session for the user and clears the failed-login counter (an account already suspended at level 5 remains suspended until access is restored by support). — FAILED_LOGIN_ATTEMPT increments the cumulative counter and escalates the lock at each milestone: 5 attempts → 15 minutes, 6 → 30 minutes, 7 → 1 hour, 8 → 24 hours, 9 or more → suspension with no automatic recovery. The counter tracks consecutive failures: a successful SCA login (/user/login/complete, /business/login/complete) or a read validated against an active SCA session clears it, as does RESET_PASSWORD_COMPLETED. There is no time-based reset; an active lock window has to elapse before the next login can succeed.