It's not CRITICAL if it happened once to one single user. Readjusting severity to a reasonable level.