Do not send report until...?

Is it possible to send notifications or create reports only for users that have entered at least 10 bad passwords within a certain amount of time?