Steps to reproduce:

1. Go incognito on your browser.
2. Try logging (with wrong password) into your account 6 times (5 is the threshold limit for a notification to be generated from a known IP).
3. Log in.
4. The icon shows the correct number of failed attempts.
5. The notification however always says "a failed attempt". Dumping the var ($this->event->getExtraParam( 'count', 0 )) being passed into the message always gives 1.

This was working fine until about ~1 month ago. What changed?