For those #mastoadmin who have to clean up the mess, this query helped a bunch – obviously replace Infosec.exchange with your domain. You can select all accounts and suspend at once, then jump to the end and you’ll see two accounts that are inadvertently swept up – just manually unsuspend those.