Arrests, a conviction, federal warnings and regulator alerts. None of them stopped a November incident using an April technique.