you are viewing a single comment's thread
view the rest of the comments
[–] 25 points 5 months ago (4 children)

My somewhat educated conspiracy theory is that companies do this when they know their user data has been stolen, but they don't want to go public with the breach.

Just quietly invalidate everyone's password so everyone is forced to update them, making the stolen data useless.

  • source
  • hideshow 4 child comments
  • [–] 9 points 5 months ago (2 children)

    This happened to me recently, it was actually a password policy change. My old password didn't have all the required types of characters

  • source
  • parent
  • hideshow 2 child comments