The token is active in the backup. Revoke it, then issue a replacement after reviewing use.
