I’ve been in development enough years that I read this as a company that has had a “security incident” that they’re not public about, and have set all accounts to Force Password Change.