Perhaps there's a mass attack against the accounts? The easiest and safest thing to do is invalidate the password if account compromise is suspected. Not most

Perhaps there's a mass attack against the accounts? The easiest and safest thing to do is invalidate the password if account compromise is suspected. Not most convenient, though. (Full disclosure: I'm not affiliated with Google, just speculating)