City took almost 3 hours to send out alert on the fraudulent emails.

Not great.