this actually sounds like the sort of thing they might do if some master key that they were storing for some subset of accounts was internally breached, and the

this actually sounds like the sort of thing they might do if some master key that they were storing for some subset of accounts was internally breached, and they had to force a password reset on them.